Belgium's finance and tax agency (FOD Financiën) has confirmed a cyberattack after which it took several digital services offline, including the main online tax portal MyMinfin, and said the deadline for certain tax filings will be extended to November 16.
The agency said on Wednesday that the attack prompted it to pull "several" online services offline as a precautionary measure while investigations begin. "This measure helps limit the risks and makes it possible to carry out the necessary technical interventions to ensure the security of our systems," it said in a public announcement.
FOD Financiën noted that the outage affects the October 31 extended deadline for certain tax filings, such as those from sole traders and foreign-source income. The deadline has been pushed back to November 16, by when the agency expects MyMinfin to be restored.
At this early stage, the agency said there were no indications that data had been compromised. “Data protection is a top priority for the FOD Financiën,” the agency stated. “At present, there are no indications that a data breach has occurred or that data has been compromised.”
Spokesperson Francis Adyns told local media that the attack was thwarted within hours. He said it was unable to gain access to applications or data.
Analysis
Why This Matters
- The attack disrupts access to essential tax services, affecting individuals and businesses with upcoming filing deadlines.
- The extension to November 16 provides temporary relief, but reliance on a single online portal highlights vulnerability to cyber incidents.
- The absence of confirmed data compromise does not rule out future revelations, given the early stage of the investigation.
Background
Belgium's tax agency manages national tax collection and online filing through platforms like MyMinfin. Cyberattacks on government tax portals have become more frequent globally, often targeting sensitive financial data. This incident forced the agency to isolate potentially compromised systems as a standard security measure.
Key Perspectives
FOD Financiën: says the shutdown is a precautionary step to limit risks and secure systems, with data protection as its top priority; no breach has been confirmed.
Spokesperson Francis Adyns: described the attack as "not particularly complex" and said it was "thwarted in time," with no evidence of data export.
What to Watch
- Whether the investigation uncovers any data exfiltration despite current indications.
- When MyMinfin and other services are fully restored, and whether further deadline adjustments are needed.
- Potential follow-up disclosures about the attackers or method used.
Checked
12 claims in this story checked against 1 source: 11 supported.
Show each claim
- SupportedBelgium’s tax agency confirmed a cyberattack.www.theregister.com - Articles: “FOD Financiën confirmed the attack on Wednesday”
- SupportedThe agency extended the filing deadline to November 16.www.theregister.com - Articles: “The agency confirmed the deadline will be extended to November 16”
- SupportedMyMinfin was taken offline while initial investigations began.www.theregister.com - Articles: “MyMinfin, the agency's main online tax portal, as well as other online services, are temporarily unavailable while they start the initial investigations.”
- SupportedThe agency said there were no indications of a data breach.www.theregister.com - Articles: “At present, there are no indications that a data breach has occurred or that data has been compromised.”
- SupportedThe attack led the agency to take several digital services offline, including MyMinfin.www.theregister.com - Articles: “Belgium's finance and tax agency has pulled "several" digital services offline after a cyberattack on the organization.”
- SupportedThe agency said: “This measure helps limit the risks and makes it possible to carry out the necessary technical interventions to ensure the security of our systems.”www.theregister.com - Articles: “"This measure helps limit the risks and makes it possible to carry out the necessary technical interventions to ensure the security of our systems," it said in a public announcement.”
- Partly supportedThe October 31 extended deadline applied to certain filings, including those from sole traders and foreign-source income.www.theregister.com - Articles: “referring to the October 31 extended deadline to submit tax filings for specific types of income, such as sole traders and earnings from foreign companies.”
- SupportedThe agency expected MyMinfin to be restored by November 16.www.theregister.com - Articles: “by which time MyMinfin, the platform through which such filings would normally be submitted, should be back up and running.”
- SupportedThe agency stated: “Data protection is a top priority for the FOD Financiën.”www.theregister.com - Articles: “"Data protection is a top priority for the FOD Financiën," it said.”
- SupportedThe agency stated: “At present, there are no indications that a data breach has occurred or that data has been compromised.”www.theregister.com - Articles: “"At present, there are no indications that a data breach has occurred or that data has been compromised.”
- SupportedSpokesperson Francis Adyns told local media the attack was thwarted within hours.www.theregister.com - Articles: “Spokesperson Francis Adyns told local news outlets that the attack was thwarted within hours”
- SupportedAdyns said the attack was unable to gain access to applications or data.www.theregister.com - Articles: “"The attack could not be sufficiently expanded within our environment to take over applications or gain access to data," he told Nieuwsblad.”
