Cyberattack at Belgian Federal Finance Ministry disrupts tax services
On October 28, 2026, the Belgian Federal Public Service Finance (FOD Financiën) confirmed it is responding to a cyberattack that has disrupted public-facing tax portals and internal systems. Citizens and businesses cannot currently access MyMinfin or file returns electronically. The ministry has not disclosed the attack vector, scope of data exposure, or estimated recovery timeline.
Government IT infrastructure remains a high-value target. Attackers often exploit unpatched vulnerabilities in public-facing services, use phishing to gain initial access, or leverage supply chain weaknesses. Without details on this specific incident, we can only note that rapid detection and containment are critical to limiting damage.
Organizations running similar citizen-facing platforms should verify their patch status, review access controls, and confirm that incident response plans cover prolonged outages. Backup and recovery procedures need regular testing, not just documentation.
If you are managing infrastructure that handles sensitive data or public services and want to discuss detection, segmentation, or recovery planning, we are available to talk.