MediumII Cyber Warfare & Critical Infrastructure28 October 2026, Wednesday
Belgian finance ministry takes MyMinfin offline after a cyberattack
Belgium's Federal Public Service Finance (FOD Financiën) said on 28 October that its digital services had been disrupted by a cyberattack. The MyMinfin tax portal and several other services were shut down as a precaution, and some returns due on 31 October will get an extended deadline.
FOD Financiën, Belgium's federal finance and tax administration, said in a statement on Wednesday 28 October that its digital services had been disrupted by a cyberattack. Euronews reports that MyMinfin, the portal where individuals and companies file tax returns, and several other online services were shut down as a precaution while the investigation continues. Cyberattaque.org wrote that the services taken offline included Tax-on-web, the returns system. The administration said it had so far found no trace of personal data being leaked, but the investigation is ongoing. It has not said who the attacker is, whether there is a ransom demand or when services will resume; these points could not be verified.
The timing amplifies the impact. According to the Brussels Times, the deadline for returns covering self-employment income and some foreign professional income is 31 October, three days after the attack. The administration said it would grant a sufficient extension for these returns and announce the new date as soon as possible. Cyberattaque.org reports that the same body's sites finances.belgium.be, finimmoweb.be and ruling.be were taken down as a precaution on 21 October over critical PHP vulnerabilities, with most back online on 23 October. No link has been drawn between the two incidents. On 30 September the agency had also warned of phishing campaigns using its name.
Talay assessment
Bottom line
The attack looks more like a service continuity problem than data theft: the administration says it has found no trace of a leak, yet the tax portal is down three days before a filing deadline. The same agency took its sites offline on 21 October over PHP vulnerabilities, which raises the question of whether public tax infrastructure can keep up with the patch cycle. Until the attacker and method are disclosed, the scale of the incident will remain unclear.
Likely effects
- Tax collection calendarNegativeWeeks
Extending the 31 October filing deadline could push back receipts from the self-employed by a few weeks; the amount has not been disclosed.
- Public IT investmentUncertain1–6 months
Two separate outages within a week accelerate the move of legacy systems and patching speed at Belgium's federal administration onto the political agenda.
- EU public-sector cyber riskNegative1–6 months
Because tax portals collect identity and financial data, any later confirmation of data loss would increase notification and supervisory burdens under NIS2.
Possibilities, ranked
- 1Outage resolved within days55%
Services reopen gradually, an extended deadline is announced and no evidence of a data leak emerges.
Watch: FOD Financiën announcing MyMinfin is back online and a new filing date
- 2Ransomware surfaces30%
A group claims the attack or publishes data, and the outage stretches into weeks.
Watch: A listing for the Belgian finance ministry on ransomware leak sites
- 3Leak confirmed15%
The investigation shows personal or tax data was stolen, and a data protection process begins.
Watch: A notification to Belgium's data protection authority or a corrective statement from the administration
Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.
Market reaction
Indicators affected
- Deadline extended▼ 31 Oct
- Trace of data leak▲ None (under review)