From October 22, 2026, an external attacker had access to a management environment of the software used by Stad and OCMW Aalst for digital document signing. The supplier, Vanden Broele, detected this on October 23, 2026, and immediately blocked access. The investigation into the incident is ongoing.
Interim investigation results indicate that internal user data was accessed. However, there are no indications that citizen files or document contents were opened or downloaded. Based on current information, personal data of Aalst residents is also not believed to have been accessed. The City of Aalst is closely monitoring the supplier's investigation.
The city urges citizens to remain vigilant against phishing. It is advised to be cautious with unexpected emails, SMS messages, or phone calls regarding documents, signatures, or payments. The advice is not to click on links or open attachments if in doubt. Sharing itsme codes, ID card PIN codes, or passwords, even with someone claiming to be from Stad and OCMW Aalst, is strongly discouraged.
Residents who suspect their identity or signature is being used, for example on an unknown document or for an unsolicited application, are advised to report it to the police. If you are unsure about a message sent in the name of Stad Aalst, you can contact them via info@aalst.be or 053 77 9300.
