Search News


Browse Archives

News

When Threats Are Like Spam

August 30, 2007

Share This Story

FREE Daily News Alerts

Advertisement

As classes began this week at many universities, some employees turned on their computers to find bomb threats sitting in their inboxes.

Such threats aren't necessarily unusual at large and prominent institutions, but in this case officials started to notice that they weren't alone. At Princeton University, an e-mailed bomb threat arrived at an inbox for general inquiries early on Sunday morning and was discovered the next day. Eleven separate messages arrived at the admissions office of Oregon State University at around the same time. On Tuesday, American University's Washington College of Law received two threatening e-mails.

In each case, officials swept buildings or evacuated them -- and no bombs were found. Now the Federal Bureau of Investigation is trying to determine whether any of the e-mails were connected in some way, and other institutions are on alert for similar threats. The messages "targeted campuses across the country," said Todd Simmons, director of news and communications services at Oregon State, "like spam e-mails."

Especially at a time when fears over campus security are heightened, in the wake of the shootings at Virginia Tech and the more distant shadow of September 11, universities are quick to take all such threats seriously. So as a matter of course, the FBI investigation could be considered routine whether or not an eventual link between the various threat e-mails is found.

"This is not an uncommon event on campus, obviously elevated due to the real impact of 9/11," said Sheldon E. Steinbach, a lawyer in the postsecondary education practice of the Washington law firm Dow Lohnes. "But they tend to overwhelmingly be hoaxes, and create a copycat syndrome that perpetuates itself for a short while."

At least seven universities had received threats between last Friday and Tuesday, including:

  • Carnegie Mellon University;
  • Cornell University, where a threat e-mailed to a faculty member at the Johnson Graduate School of Management caused an evacuation;
  • the University of Illinois at Chicago;
  • Another university in the Southeast (unidentified, but not Duke or Emory) where the admissions office was fully evacuated.

Officials at the Department of Homeland Security and the FBI, where the National Center for the Analysis of Violent Crime's Behavioral Analysis Unit is on the case, would not comment specifically on the investigation. (A DHS spokeswoman said there is "no credible information that would lead us to believe that there is an imminent attack to the homeland.")

But strikingly, there seemed to be some characteristics that at least some of the e-mails had in common:

  • Messages didn't mention the institution by name or even single out a specific building, suggesting a lack of familiarity with the campus. At Princeton, said Cass Cliatt, the director of media relations, the threat didn't use the word "Princeton" and only specified the "School of Engineering" -- presumably the School of Engineering and Applied Science, which is not in one building but spread out over several. Officials did walk-throughs of eight buildings.
  • The e-mails didn't all arrive at universities that were starting classes this week; Princeton, for example, doesn't begin its semester until later in September.

"After learning that there were other universities [it] actually reinforced in our minds that it was not a credible threat," Cliatt said.

For now, universities will probably continue to cooperate with each other as well as with state and federal authorities. At Oregon State, said Jack Rogers, the director of public safety, the IT department is already working to trace back the origin of the threats.

See all postings »
Advertisement
Advertisement

Matching Jobs

Comments on When Threats Are Like Spam

  • U. of Iowa also a target
  • Posted by anon at U of Iowa on August 30, 2007 at 8:55am EDT
  • There have also been bomb threats at the University of Iowa.

    A short report from the local newspaper on the most recent incident: http://www.presscitizen.com/apps/pbcs.dll/article?AID=/20070830/NEWS01/708300350/1079

  • does spam actually have anything in it?
  • Posted by ted at University of South Florida on August 30, 2007 at 8:55am EDT
  • I guess the largest concern that i have for this is that if these messages are truly "spam" messages will eventually be caught in our spam filters... depending on how well those filters work. I know that I routinely scan then delete my Spam - but will this mean that every university and education provider will now have to ensure that spam messages are reviewed for possible threats?

    In todays environment of heightened security concerns, will an institution be held accountable for a message that falls through the "cracks" of a spam filter?

  • Posted by Sarah on August 30, 2007 at 9:45am EDT
  • Spam filters usually work by filtering email from certain identified servers, email with a large number of recipients, or email that contains trigger words or images.

    It is unlikely that a bomb threat that didn't include the words "free" or "viagra" and was sent to a limited number of schools would be flagged as spam.

  • Posted by Blake Vawter at Oregon State University on August 30, 2007 at 2:10pm EDT
  • I have to say 'kudos' to our security staff. The Oregon State trooper was at our office within minutes. Our customer service staff was very calm and professional after discovering the emails. Even one of our computer support techs just happened to be in the office to work on a computer and he jumped right in to get our email admin and network admin involved in the trace (thanks, Max!).

  • Posted by Anna at University of Tampa on September 6, 2007 at 2:30pm EDT
  • University of Tampa received the same threats last night/this morning.