Belgium’s Federal Public Service Finance confirmed a cyberattack on Wednesday, October 28, and took several digital services offline, including MyMinfin, the country’s main online tax portal. The outage struck days before a filing deadline, and the agency has pushed that deadline back by more than two weeks.
FPS Finance Pulls MyMinfin and Other Services Offline
The agency, known in Dutch as FOD Financien, said it suspended “several” digital services after confirming the attack. MyMinfin is the central portal through which taxpayers handle their filings, so its suspension affects the agency’s main digital channel to the public.
FPS Finance described the shutdown as a precaution. Initial investigations are under way, and the agency has not identified an attacker or disclosed how the intruder gained entry. It has also not said how many services beyond MyMinfin are affected or how long each will stay offline, other than indicating the portal should be back by the new deadline.
No Indication of a Data Breach So Far
The agency states there is currently no indication of a data breach or data theft. That position reflects the early stage of the investigation rather than a final finding, and the agency says its inquiry continues. For now, the confirmed impact is disruption to tax filing for affected taxpayers, with no confirmed exposure of taxpayer records.
Filing Deadline Moves From October 31 to November 16
The original deadline of October 31 applied to certain categories of income, including sole traders and taxpayers with foreign-source income. FPS Finance extended that date to November 16, by which time it expects the portal to be restored.
The extension covers the specific filers whose deadline fell on October 31. The agency has not described any changes for taxpayers with other deadlines.
Timeline of the MyMinfin Outage Before October 31
The sequence is short. The agency confirmed the attack on October 28 and suspended the portal the same day. The original filing deadline of October 31 fell three days later, and the revised date of November 16 gives filers an extra 16 days from that original cutoff.
What Remains Unknown About the Attack
Reporting so far leaves most operational questions unanswered. FPS Finance has not named a threat actor, has not said whether the attack was a denial-of-service flood, an intrusion or something else, and has not described the entry method. The agency’s description of the services as taken down “as a precaution” suggests a deliberate shutdown rather than a failure caused directly by the attackers, though the agency has not spelled out the distinction.
Government Tax Systems as a Timing Target
A tax portal carries its heaviest traffic and highest stakes near a filing deadline, which makes any outage in that window visible to a large share of the public. In this case, the disruption landed in the final days before the October 31 cutoff for sole traders and filers with foreign income, and the agency responded by moving the date rather than leaving filers to meet it without the portal.
The agency’s statement that no data theft is indicated will be tested as the investigation proceeds. If it later finds that records were accessed, the incident would shift from a service outage to a data breach affecting taxpayers. At this stage, the verified facts are limited to the confirmed attack, the suspended services, the extended deadline and the absence of evidence of theft.
Belgian Tax Authorities Leave the Investigation’s Direction Open
FPS Finance said initial investigations are under way and that there is currently no indication of data theft. It did not say who is leading the inquiry, whether other Belgian authorities are involved or when it expects findings. Taxpayers with deadlines other than October 31 received no new guidance in the agency’s statement.
The outage’s practical effect so far is limited to the closed portal and the extended deadline. The November 16 date is tied to the agency’s expectation that MyMinfin will be back by then.
