Belgium’s federal tax authority has restored several online services following a cyberattack that disrupted access to tax filing systems shortly before an important submission deadline. The incident prompted officials to extend the deadline to November 16, 2026, while investigating the unauthorized intrusion.
The attack occurred overnight between October 27 and 28, targeting systems operated by the Federal Public Service Finance (FPS Finance). Security monitoring tools detected suspicious activity within hours, allowing technical teams to intervene before the attackers could take control of government applications.
As a precaution, the agency disconnected potentially compromised components and suspended access to several services, including MyMinfin, Tax-on-web and Biztax. These platforms allow individuals and businesses to manage financial information and submit tax returns electronically.
Belgian officials said the attackers had entered parts of the agency’s technical environment but were stopped before accessing sensitive information. According to the finance ministry, no data was leaked, and the intruders did not gain control of its applications.
Restoring the affected services required additional security checks. The agency explained that systems needed to be recovered in an isolated environment to reduce the possibility of further compromise.
The disruption came just days before the October 31 deadline for certain tax declarations. To accommodate affected taxpayers, authorities extended the submission period until November 16. The extension applies to returns that were originally due around October 31.
Belgium’s federal police and the Centre for Cybersecurity Belgium joined the investigation to help identify those responsible. Authorities have not publicly disclosed the attackers’ identities or explained how they initially entered the systems.
The affected tax websites reportedly returned to service on the evening of October 31, following several days of restricted access. The finance ministry maintained that the attack had been contained and that taxpayer information had not been stolen.