Belgium's MyMinfin tax portal offline after attack before filing deadline

Key points

• MyMinfin access was cut off on Wednesday.
• Belgium's finance department is probing an attack by unknown parties.
• The outage affects the countrywide tax portal before the filing cutoff.
• No CVE or technical root cause was provided.

Belgium's Federal Public Service Finance has taken MyMinfin offline after what it describes as an attack by parties that have not been identified. The move on Wednesday interrupted use of the countrywide tax portal, and access remains suspended while officials examine the incident. The timing is sensitive because the disruption comes ahead of the filing deadline.

The affected population is broad: taxpayers and intermediaries who rely on MyMinfin for national tax services. Because the portal is a central channel, even a temporary shutdown can delay submissions, create uncertainty about deadlines, and push users toward alternative support channels that may not be prepared for the volume.

At this stage, the available facts point to an availability and access-control response rather than a confirmed data breach. The finance department is investigating the attack, and no CVE or product vulnerability has been cited. The public record does not identify the intrusion path, so it is too early to characterize the root cause.

Why it matters: tax portals are high-value targets before deadlines, when citizens are most dependent on them and when outage pressure can lead to rushed workarounds. Suspending access is a prudent containment step, but it also raises the stakes for clear communication and continuity planning.

What to watch: official updates from the finance department on restoration, any notice of data exposure, and guidance on deadline relief. Administrators should watch for phishing that impersonates the tax service and for credential-stuffing attempts against related accounts.

What to do now

1. Treat any MyMinfin-linked credentials as exposed until confirmed otherwise: force password resets and revoke active sessions for staff who use the portal, especially shared or service accounts.
2. Enable phishing-resistant MFA on all finance and tax-related accounts; block legacy authentication where possible.
3. Review authentication logs for unusual locations, impossible travel, and failed-login spikes tied to MyMinfin users, then isolate affected accounts.
4. Send staff guidance to avoid password reuse, verify deadline notices through official channels, and report suspicious tax-themed emails.
5. Add lookalike MyMinfin domains and tax-themed lures to email and web filtering, and warn users about credential-harvesting pages.
6. Confirm backup and continuity contacts for payroll and tax filing; document manual workarounds and approval paths.
7. Coordinate with the finance department or sector ISAC for official status, and do not send taxpayer data to unverified support channels.

Original source

The Record