INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Belgian Tax Services Disrupted by Cyberattack Before Filing Deadline

| 2026-10-29 13:31 CRITICAL HIGH DATA BREACH DDOS & DISRUPTION
JSON
Executive Summary
AI-generated
Belgium's finance ministry took its main online tax portal offline following a cyberattack, just days before a filing deadline for some taxpayers on October 29, 2026. The Federal Public Service Finance (FPS Finance) said it was investigating the extent of the attack and had temporarily suspended access to MyMinfin, with affected taxpayers given additional time to file their returns. No data breach has been confirmed, but investigators are examining the possibility of data exposure. The agency attributed the shutdown as a precaution while specialists assessed the impact of the attack and carried out technical work to secure its systems. This incident occurred amidst broader cybersecurity alerts over two critical vulnerabilities in PHP that could allow attackers to remotely execute malicious code on vulnerable servers, affecting government websites across Europe, including those operated by Forbes Ukraine, which is based in Ukraine.
Technical Mitigations AI-generated
• Patch PHP versions to address the two critical vulnerabilities that could allow attackers to remotely execute malicious code on vulnerable servers. • Use a web application firewall (WAF) to detect and block attacks exploiting the identified software vulnerability in MyMinfin. • Implement additional security measures, such as intrusion detection systems (IDS), to monitor for suspicious activity related to the cyberattack.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
BENELUX BENELUX governmentgovernment financefinance
Incident Timeline
‎2026/10/29
Threat actors exploited critical PHP vulnerabilities to temporarily shut down several government websites, including FPS Finance's MyMinfin platform in Belgium.
organisation The Brussels Times
Belgian news outlet The Brussels Times reported that FPS Finance websites were among those affected.
organisation Recorded Future News
is a reporter for Recorded Future News based in Ukraine.
organisation Forbes Ukraine
She previously was a tech reporter for Forbes Ukraine.
organisation FPS Finance
"Currently, there is no indication that a data breach has occurred or that any data has been stolen," FPS Finance said, adding that investigators were continuing to examine the possibility of data exposure.
organisation The Federal Public Service Finance
The Federal Public Service Finance (FPS Finance), which oversees taxation and other financial administration, said Wednesday that it was investigating the extent of the attack and had temporarily suspended access to MyMinfin, the country's main online platform for managing tax and financial affairs.
organisation PHP
The disruption coincided with a broader cybersecurity alert over two critical vulnerabilities in PHP, a widely used programming language, that could allow attackers to remotely execute malicious code on vulnerable servers.
organisation The Kyiv Independent
Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.
organisation The Kyiv Post
Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.
‎October 31
Threat actors exploited a vulnerability to disrupt Belgian tax services ahead of an October 31 deadline for taxpayers reporting certain types of income.
Intelligence Sources
TheRecord 2026-10-29