MCPS shuts down web-based accounts receivable system after security flaw found by Parents' Coalition

MCPS has temporary shut down their web-based iPayment Business Center until September 9, 2022.  The iPayment web site is https://www.montgomeryschoolsmd.org/departments/accounting/

The specific reasons for the shutdown are not reported on the MCPS web site but sources have informed us that the site was shut down after a Parents' Coalition member discovered and reported a security flaw in the system.  The security flaw allowed substantially anyone to easily access payment records, including records of MCPS employees and retirees, without proper authentication or authorization.  The programming error also allowed names and addresses of payers to be accessed without authorization. 

Users who click on the link to access the MCPS iPayment Business Center are receiving the following message while the system is shut down.

THIS PAGE IS DOWN FOR MAINTENANCE AND WILL RETURN SOON.