Cyberattack Takes Belgium's MyMinfin Offline

Belgium’s Federal Public Service (FPS) Finance says its digital services have been hit by a cyberattack. It has taken MyMinfin, the online portal that taxpayers use to see their tax records and file returns, offline as a precaution, along with “some other services”. The ministry said on 28 October that it is still working out what the attack actually did.

The statement, published on the federal government’s press centre and on FPS Finance’s own website, is short. It names no attacker and gives no attack type. What it does say matters to millions of people who deal with the Belgian tax authority online: some filing deadlines will move, and so far the ministry has seen no sign that data was stolen.

What FPS Finance has said so far

“The digital services of FPS Finance are currently being hit by a cyberattack,” the statement begins (TSN’s translation from the Dutch). “At this moment our services are investigating the concrete impact of the attack.”

The shutdown of MyMinfin is described as a defensive step rather than a direct result of the attack. Taking the portal and several other services offline “helps to limit the risks”, the ministry says, and lets its teams carry out “the necessary technical interventions” to keep its systems secure.

On data, the wording is careful. “At this moment there are no indications of a data leak or that data was taken,” FPS Finance says. “This aspect is also being closely investigated and followed up.” That is a statement about what the ministry has found so far, not a finding that nothing was accessed.

The ministry also says that “a large part” of its other applications remain available, with full or partial functionality, and that it is working to bring the affected services back “as quickly as possible”. It has not said which services are down besides MyMinfin, or when they will return.

Tax deadlines will move, but the new date is not set

The most practical consequence is for upcoming filing deadlines. FPS Finance says it realises the outage affects “tax deadlines in the near future”. It promises “sufficient” extra time for filing returns with specific income and says the exact date “will follow as soon as possible”.

The statement does not define which returns this covers or how long the extension will be. Taxpayers and accountants who were due to file through MyMinfin in the coming days have, for now, a promise of more time but no new date to plan around. Anyone with a deadline approaching will need to watch FPS Finance’s news page for the follow-up announcement.

A precautionary shutdown shifts the cost onto taxpayers

This is TSN’s analysis. Pulling a national tax portal offline is a blunt decision, and FPS Finance’s statement shows the trade-off clearly. By cutting off MyMinfin before it knows the full impact of the attack, the ministry limits what an intruder could reach through the portal, and the people who rely on it pay in lost time. The promised extension is an admission of that cost. It also suggests the ministry expects the outage to last long enough to collide with real deadlines.

Public bodies have been making the same call more often. In the UK, a minister said 32 government services went offline during the PHP2Shell crisis earlier this month. That was a different incident, and nothing FPS Finance has published connects the two. In the US, Columbia, South Carolina took four city online services down after a ransomware attack. In each case, the first visible effect was the shutdown, not a confirmed breach.

The “no indications” line deserves a cautious reading. Early statements in public-sector incidents often describe what has been checked, not what has been ruled out, and they are often revised once forensic work is complete. FPS Finance has said it is still examining exactly this point. Until it publishes more, the honest summary is that the attack is confirmed, while its scope and any data loss are unknown.

The incident also lands as governments argue over who should carry the cost of cyber failures. The UK has just promised to consult on liability for cyber breaches, and UK inspectors recently found that suppliers of police data had been hit by multiple attacks. For a tax authority, the question is less about blame than resilience: how quickly core services can be restored without reopening the door.

What is still unknown

FPS Finance has not said when the attack began, how attackers got in, whether it was ransomware or another kind of attack, or which systems were affected beyond the services it took offline. It has not given a date for MyMinfin’s return or for the new filing deadline. TSN will update this story when the ministry publishes more. Other major incidents are tracked on TSN’s ransomware and cyber attacks hub.