Further investigation revealed that a number of schools, not just in Baltimore, but across the US, had systems that were directly accessible from the Internet and were vulnerable to several different attacks.