An online learning management system is back online after a cyberattack created chaos for local school districts and colleges in Maryland.

Canvas, an online portal used by students and teachers, and parent company Infrastructure were attacked by hacking group ShinyHunters. The group is tied to several other notable attacks, including the Live Nation hack.

In a statement to CBS News on Friday, Instructure said the company took Canvas offline after learning that hackers had “made changes to the pages that appeared when some students and teachers were logged in.”

The hackers exploited an issue linked to its Free-For-Teacher accounts, the company said.

“As a result, we have made the difficult decision to temporarily shut down our Free-For-Teacher accounts,” the company said. “This gives us the confidence to restore access to Canvas, which is now fully back online and available for use. We regret the inconvenience and concern this may have caused.”

Canvas was also removed from a dark web leak site created by the ransomware group to publish stolen data.

Several school districts in Maryland avoided using Canvas altogether on Friday, including Anne Arundel County Public Schools, Harford County Public Schools, and Howard County Public School System. Baltimore City Public Schools uses the site, but said it had minimal impacts and does not believe the district’s data was stolen.

Baltimore County Public Schools does not use Canvas, and it was not impacted.

Local colleges and universities halted to a standstill in the middle of finals because of the breach. The University of Maryland urged faculty and students not to access the site on Friday morning. By midday, Canvas was fully restored.

Student reaction

Students at Johns Hopkins University say the website was down for about four hours Thursday night. This breach occurred during the middle of finals at the university, and students say that without the site, they didn’t have access to study materials.

“I don’t think I can manage without Canvas,” Aseel Adam, a first-year student at Hopkins, said. “I had a final today, so I was like, ‘Oh no’. I had to email my teacher about the slides final practice. It was bad.”

Students called it a major inconvenience and said they had a late-night studying after Canvas came back online.

“5 pm hits, Canvas is shut down,” Alveena Nasir, a first-year student at Hopkins, said.  “I am screwed. I have a final tomorrow. I have no access to any my files. I have no downloads…For that to shut down, I feel like the whole school shuts down.”

Canvas is used by students to review materials, submit assignments, and view their grades. Teachers are also able to communicate with students on the platform.

Students say they also don’t know what data may have been leaked and if it’s their personal information.

“They can get a lot of my information, fake it for someone else, or some bad, heinous crime. It did kind of worry me,” Adam explained.

Preventing future attacks

The Johns Hopkins University Information Security Institute has been testing websites and platforms like Canvas, trying to find vulnerabilities to help prevent these types of attacks. Now, AI is making it easier than ever to take down this kind of system.

“In the old days, usually [it would] take an expert maybe a month to really come up with those complicated attacks. Recently, with the help of AI, [it takes] sometimes maybe one or two days, they can really come up with those complicated attacks,” Yinzhi Cao, technical director of the institute and associate professor of computer science, tells WJZ.

Cao says everyone needs to be more cyber-aware. To protect yourself, don’t give out deeply personal information to online platforms, use two-factor authentication, and even watch out for phishing emails.

Now, students are questioning the school’s reliance on Canvas and how they can be more prepared if there’s an attack in the future.

“The idea that we depend so much on Canvas for a lot of things is also an issue. I think there should be a balance,” Adam said.

“For having a website so fundamental to our education and not being able to protect it, I think there should be some considerations on improving it,” Nasir concluded.

• Maryland has become the first state to designate a state shark, choosing the extinct megalodon.
• The effort was led by paleontologist Stephen Godfrey of the Calvert Marine Museum.
• Fossils of the prehistoric shark are commonly found throughout Maryland’s Chesapeake Bay region.

As paleontologist Stephen Godfrey walked into the Calvert Marine Museum one morning in April, staff members congratulated him. In a way, he brought an extinct species back to life.

Two days earlier, in the final hours of Maryland’s legislative session, lawmakers passed a bill that made megalodon — the largest shark that ever lived — the state shark.

Godfrey, the marine museum’s curator of paleontology, helped come up with the idea and testified at the State House in support of it. Now, Maryland is the first to have a state shark, he said.

“As long as people have been here in Maryland, they have been noticing and collecting megalodon teeth,” he said.

Fossils of the prehistoric shark can be found throughout the Chesapeake Bay region.

“It was a prime place for early paleontologists in American history to come to collect fossils, to document the succession of life,” said Godfrey, who grew up in Quebec, Canada. He has been interested in natural history since he was young and turned his childhood bedroom into a museum.

“Hey, why don’t we try to make it the state shark?” Godfrey recalled asking.

Students join in effort to honor the mighty megalodon

He checked whether any other state had beat them to the idea. He found that North Carolina designated the megalodon tooth as its state fossil — but not its state shark.

“It was like, ‘Wow, this is like a golden opportunity,’ ” he said. “I’m surprised that nobody has thought of this.”

• Maryland State Police are searching for a missing 14-year-old from Wicomico County.
• Chester Fitchett III was last seen on May 5 in Salisbury, Maryland.
• He is described as an African-American male, 5 feet 5 inches tall, and weighing about 120 pounds.

Maryland State Police are seeking the public’s assistance in helping to locate a missing juvenile in Wicomico County.

Chester Fitchett III, 14, was reported missing on May 5. He was last seen at about 3 p.m., in the 200 block of Baptist Street in Salisbury, Maryland.

He is described as an African-American male with black curly hair and brown eyes, approximately 5 feet 5 inches tall, weighing approximately 120 pounds. He was last seen wearing a royal blue “Nike Tech” jacket, blue jeans, and white/black Nike sneakers. Investigators believe he may be in the area of Smith Street in Salisbury.

Anyone with information is asked to contact the Maryland State Police Salisbury Barrack at 410-749-3101. The investigation remains active and ongoing.

MOTORCYCLE THEFT RING BUSTED: MD busts motorcycle theft ring that targeted 2024 Ocean City BikeFest