Skip to content
Campus Alert Archive
SSU

Bomb threat, January 22, 2026

AI-generated · every claim is source-linked
GAbomb threatemergency notificationmedium confidence
UnfoundedNo evidence of an actual threat was found. The institutional response is documented because the alert communication is identical to what would occur during a real incident.

On January 22, 2026, Savannah State University, Georgia's oldest public HBCU, was among multiple historically Black institutions targeted by anonymous email threats. SSU implemented a soft lockdown with additional police presence while keeping operations running. President Dr. Jermaine Whirl stated that no immediate threat had been validated. The University System of Georgia and FBI confirmed the threat originated overseas.

Alerts
1
Response
—
Killed
0
Injured
0
Institution
Savannah State University
Hbcu · GA
All SSU cases →
~3,600 studentsSSU Alert
Official alert policy
Read when and how SSU says it will use SSU Alerts: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

1 message in sequence · 1 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTEmail
Verified verbatim931 chars
Several HBCUs across the country received email threats against their campuses. Savannah State was included in the threats, but no imminent threat has been validated. Out of an abundance of caution, our campus police have been working with Chatham County and the City of Savannah to ensure campus safety. The USG Office and the FBI have been involved and confirmed that the threat is originating overseas. At this time, campus operations will continue as normal. Additional police presence will be on campus for the remainder of the day. Our local schools have also been targeted, and several of them have gone on lockdown. We’ll continue to monitor the situation for the safety and well-being of all students and employees. If you receive any threats via email, please forward them to Interim Chief Thomas and do not respond to them. I want to thank our police team for their steady leadership throughout the morning and the day.
Dual HTML + independent third-read of Wayback 20260123030035 of the WSAV article (live WSAV HTTP 403). Wrapping journalist curly quotes stripped; interior U+2019 in We'll kept. sha256 e99a359a21c1d0ac92d1039a94eb78e8650657efbb99885f369776911b451a55. Reconstruction of a 414-char soft-lockdown SMS replaced by the 931-char presidential email.
Live WSAV 403; sourceUrl is the Wayback capture used for the bytes (alert sourceUrl and ledger sourceUrl byte-identical).
Message elements

How the first alert is built

To check this alert, SuperGrok Heavy 4.5 (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

Several HBCUs across the country received email threats against their campuses. Savannah State was included in the threats, but no imminent threat has been validated. Out of an abundance of caution, our campus police have been working with Chatham County and the City of Savannah to ensure campus safety. The USG Office and the FBI have been involved and confirmed that the threat is originating overseas. At this time, campus operations will continue as normal. Additional police presence will be on campus for the remainder of the day. Our local schools have also been targeted, and several of them have gone on lockdown. We’ll continue to monitor the situation for the safety and well-being of all students and employees. If you receive any threats via email, please forward them to Interim Chief Thomas and do not respond to them. I want to thank our police team for their steady leadership throughout the morning and the day.

  • Sourcepresent25/25

    Final assessment

    Source is present at 25/25. First-person our campus police, Savannah State, the USG Office, the FBI, and Interim Chief Thomas identify the issuing and responding authorities.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: First-person our campus police plus Interim Chief Thomas identify campus police as the responding authority.
    2. present: Savannah State is named up front and the voice is institutional we, so the university is the speaker.
    3. present: The USG Office and the FBI are named as involved authorities, which counts as source.
    4. present: Campus police have been working with Chatham County and the City of Savannah, naming local responding agencies.
    5. present: Please forward them to Interim Chief Thomas names a specific campus police chief as authority.
    6. present: I want to thank our police team is first-person campus leadership identifying the home agency.
    7. present: Our campus police have been working with local government, so campus police are the on-scene authority.
    8. present: We will continue to monitor is the institution addressing its students and employees.
    9. present: FBI confirmation of overseas origin cites a named federal agency as a source of the finding.
    10. present: USG Office involvement identifies the University System of Georgia as a responding authority.
    11. present: Campus police, USG, and FBI are stacked as official responders in the body.
    12. present: Interim Chief Thomas is the named official who should receive forwarded threat emails.
    13. present: The thank-you to our police team for morning leadership tags campus police as the home authority.
    14. present: Savannah State was included names the campus as both threatened site and the speaker's institution.
    15. present: Abundance of caution is framed around our campus police, so police own the posture.
    16. present: The City of Savannah and Chatham County are named partners, showing a multi-agency chain.
    17. present: First-person our and we clauses run through the statement, marking it as an official campus message.
    18. present: The close thanks the police team, which tags campus police as the issuing side.
    19. present: Forward threats to Interim Chief Thomas functions as an internal-authority signature without a branded header.
    20. present: USG plus FBI plus campus police together identify who is handling the threat.
    21. present: No product tag such as Buckeye Alert appears, but named police, USG, and FBI still satisfy source.
    22. present: The speaker is the campus addressing students and employees about our police and our local schools.
    23. present: Involved agencies listed are campus police, Chatham County, City of Savannah, USG, and FBI.
    24. present: Interim Chief Thomas plus our campus police are the named campus authorities in the text.
    25. present: The statement is written in institutional first person from Savannah State about its police response.
  • Hazardpresent25/25

    Final assessment

    Hazard is present at 25/25. Deciding words are email threats against campuses, Savannah State included in the threats, and local schools also targeted.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: Email threats against their campuses names a specific threat rather than a generic incident or situation.
    2. present: Several HBCUs received email threats, and Savannah State was included in those threats.
    3. present: The hazard is emailed threats targeting campuses, including this one.
    4. present: FBI confirmation that the threat is originating overseas treats the emails as a real threat stream.
    5. present: If you receive any threats via email restates the hazard as emailed threats.
    6. present: Our local schools have also been targeted names the same threat class in the city.
    7. present: Lockdown at several local schools is presented as the situation those threats produced.
    8. present: Threats against their campuses is the what, with email as the delivery method.
    9. present: No imminent threat has been validated still names a threat that arrived by email.
    10. present: The opening sentence states that HBCUs received email threats against their campuses.
    11. present: The body repeats threats via email as the thing a reader might receive.
    12. present: Overseas origin still describes the same email-threat hazard, not a different event type.
    13. present: Targeted local schools plus campus inclusion specify a coordinated email-threat campaign.
    14. present: The named hazard is threats, specifically email threats to HBCU campuses.
    15. present: Lockdown at nearby schools is presented as a response to those same email threats.
    16. present: Against their campuses makes this a campus-directed threat, not a vague emergency.
    17. present: Included in the threats is explicit that Savannah State is among the threatened sites.
    18. present: Email is the vector and threats against campuses is the hazard type.
    19. present: USG and FBI involvement is about that email threat, confirming it as the event.
    20. present: Readers are told not to respond to threats via email, which names the hazard again.
    21. present: A countrywide HBCU email-threat wave is the specific problem being reported.
    22. present: Originating overseas still refers to the same campus email threat.
    23. present: Targeted and included in the threats are hazard words, not mere situation.
    24. present: The text never says shots fired or bomb, but email threats against campuses is still a specific named threat.
    25. present: Campus-directed email threats plus school lockdowns identify a threat event, not weather or a medical incident.
  • Locationpresent25/25

    Final assessment

    Location is present at 25/25. Savannah State, on campus, Chatham County, the City of Savannah, and local schools are named places.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Savannah State is named as a threatened campus, which is a named place.
    2. present: Additional police presence will be on campus is an explicit on-campus where.
    3. present: Chatham County is named as a partner jurisdiction for the safety work.
    4. present: The City of Savannah is a named city in the working-with clause.
    5. present: Campuses in the opening line are the threatened locations, then Savannah State specifies which one.
    6. present: Our local schools are a second set of places in the same community.
    7. present: Savannah State plus on campus together place the event at this campus.
    8. present: City of Savannah and Chatham County are named places, not a generic area only.
    9. present: HBCUs across the country is the wide frame, then Savannah State narrows the site for this message.
    10. present: Campus operations will continue as normal uses campus as the operational location.
    11. present: Ensure campus safety refers to this campus as the protected place.
    12. present: Local schools that have gone on lockdown are nearby targeted sites.
    13. present: The threatened geography is campuses, including Savannah State by name.
    14. present: Working with Chatham County and the City of Savannah locates the response in those jurisdictions.
    15. present: On campus for the remainder of the day is a place clause tied to the police surge.
    16. present: Savannah State was included names the institution as the site in the threat set.
    17. present: Students and employees are addressed as the campus population at that place.
    18. present: Overseas is origin of the emails, while the threatened location is the campus here.
    19. present: Campus police on campus is a campus location marker as well as a source cue.
    20. present: The City of Savannah is a named city, which satisfies named place.
    21. present: Several HBCU campuses plus this campus and local schools are stacked locations.
    22. present: Chatham County is a named county attached to the safety work.
    23. present: Location is the Savannah State campus, stated as Savannah State and on campus.
    24. present: Targeted local schools and the SSU campus are the places the emails were aimed at.
    25. present: On campus, Savannah State, Chatham County, and the City of Savannah are four place cues.
  • Guidancepresent23/25

    Final assessment

    Guidance is present at 23/25. Majority coded forward emails to Interim Chief Thomas and do not respond as recipient instructions. Two passes treated that as a tip request and saw no shelter, evacuate, or lockdown order for this campus.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Please forward them to Interim Chief Thomas is a direct instruction to recipients.
    2. present: Do not respond to them is a protective do-not-engage order aimed at readers.
    3. present: Forward threats and do not respond are paired reader actions in one sentence.
    4. present: If you receive any threats via email sets a conditional procedure for the reader.
    5. present: The only you-directed line tells people to send copies to the interim chief and not reply.
    6. present: Readers are told not to respond to threatening emails, which is recipient guidance.
    7. present: Forwarding copies to Interim Chief Thomas is a reporting instruction in the call-911 family.
    8. present: Do not respond plus forward is what the community is asked to do.
    9. present: Campus operations will continue as normal tells people to keep usual routines today.
    10. present: Continue as normal is stay-the-course guidance for students and employees on site.
    11. present: Please forward is second-person guidance, not a description of what police are doing.
    12. present: The closing action line tells employees and students how to handle threat emails.
    13. present: Do not respond is an explicit prohibition aimed at anyone who gets a copy.
    14. present: Forwarding copies to campus police is the reporting path given to recipients.
    15. present: If you receive any threats is a you-directed handling procedure.
    16. present: Combined forward-and-do-not-reply is the protective-action sentence.
    17. present: Recipients are told where to send threat emails: Interim Chief Thomas.
    18. present: Not responding to the sender is the prescribed handling of the hazard emails.
    19. present: We will continue to monitor is the university watching, but readers are still told to forward and not reply.
    20. present: The community is asked to pass emails to police rather than engage the sender.
    21. absent: Absent: extra police, FBI work, and operations as normal describe responders, not a shelter, evacuate, or avoid order.
    22. absent: Absent: there is no campus lockdown or stay-inside order, and forwarding a future email is a tip request, not a protective action for this threat.
    23. present: Please forward them is an imperative to the reader, which counts as guidance.
    24. present: Do not respond to threatening emails is a clear what-to-do for anyone who gets one.
    25. present: The action requested of students and employees is forward to the chief and do not reply.
  • Timepresent25/25

    Final assessment

    Time is present at 25/25. At this time, remainder of the day, and throughout the morning and the day are recency and duration cues.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: At this time marks present-tense status for campus operations.
    2. present: Remainder of the day is a duration bound for the extra police presence.
    3. present: Throughout the morning and the day is a same-day recency window.
    4. present: At this time plus remainder of the day are two stacked time cues.
    5. present: Extra staffing is limited to the remainder of the day, a today-style window.
    6. present: Throughout the morning names the earlier part of this day as already underway.
    7. present: No clock hour appears, but at this time functions like now or as of.
    8. present: Remainder of the day is equivalent to a rest-of-today limit.
    9. present: The thank-you covers the morning and the day, a same-day span.
    10. present: Operations continue as normal is framed at this time, a now marker.
    11. present: Additional police for the remainder of the day is an until-end-of-day bound.
    12. present: Morning and the day together show the event is unfolding today.
    13. present: At this time is an as-of recency phrase in the operations sentence.
    14. present: The day is referenced three times: at this time, remainder of the day, and morning and the day.
    15. present: Remainder of the day tells how long the extra presence lasts.
    16. present: Throughout the morning is a when-clause for police work already in progress.
    17. present: Time is present via today-scale language even without a calendar date.
    18. present: The operations line is explicitly now: at this time.
    19. present: End of day is implied by remainder of the day for the police surge.
    20. present: Same-day timing is repeated in the closing thanks for morning and day leadership.
    21. present: Recency is the morning-through-day leadership note at the close.
    22. present: As of this moment operations are normal, which is the at this time clause.
    23. present: The police presence is not until further notice; it is for the rest of today.
    24. present: Morning plus remainder of the day locate the alert in the current day.
    25. present: Three temporal phrases (at this time, remainder of the day, throughout the morning and the day) satisfy Time.
  • Impactpresent16/25

    Final assessment

    Impact is present at 16/25. Majority read no imminent threat, safety and well-being, abundance of caution, and school lockdowns as severity. Nine passes found no consequence clause such as injury or deadly harm, and treated operations as normal as undercutting impact.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: No imminent threat has been validated is an explicit imminence and severity assessment.
    2. present: Safety and well-being of all students and employees names the human stakes being protected.
    3. present: Out of an abundance of caution implies the emails could still cause harm if real.
    4. present: Several local schools have gone on lockdown, showing this threat class is treated as serious.
    5. present: Ensure campus safety states a safety outcome the campus is trying to protect.
    6. present: Well-being language is impact wording about people, not merely the hazard's name.
    7. present: FBI involvement and an overseas origin frame the emails as severe enough for federal attention.
    8. present: Lockdowns at nearby schools are a named consequence of being targeted by the same emails.
    9. present: No imminent threat is still a threat-severity call, even though the call is that harm is not validated.
    10. present: Caution is on the page because campus safety could be at risk.
    11. present: The close says monitoring continues for safety and well-being, which is impact-oriented.
    12. present: Targeted schools going to lockdown implies a potentially violent campus threat.
    13. present: Additional police presence is justified only if people on campus could be harmed.
    14. present: Unvalidated but included in the threats still leaves residual risk to people on campus.
    15. present: Safety of students and employees is the stated reason for continued monitoring.
    16. present: Abundance of caution is severity hedging that still conveys possible impact.
    17. absent: Absent: the text never says what the emails threatened to do, such as injury, a bomb, or a shooting.
    18. absent: Absent: no imminent threat has been validated denies current harm rather than stating a consequence.
    19. absent: Absent: operations will continue as normal undercuts any claim of deadly or damaging impact.
    20. absent: Absent: safety and well-being is closing boilerplate, not a description of what the hazard could do.
    21. absent: Absent: naming email threats alone does not satisfy impact, because the rubric wants a consequence clause.
    22. absent: Absent: lockdown is about other local schools, not a stated harm at Savannah State.
    23. absent: Absent: overseas origin and FBI confirmation describe where the emails come from, not harm to people or property.
    24. absent: Absent: extra police and caution describe response posture, not injuries, deaths, or property damage.
    25. absent: Absent: nothing in the body uses life-threatening, destructive, or may-cause-injury language from the rubric examples.

Coded by SuperGrok Heavy 4.5

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On Thursday, January 22, 2026, Savannah State University (founded in 1890 as Georgia's first public HBCU) became one of multiple historically Black colleges and universities to receive anonymous email threats that day. Unlike Bishop State Community College in Mobile, which transitioned to virtual learning and sent students home, SSU President Dr. Jermaine Whirl chose a soft lockdown with continued operations and additional police presence. Whirl stated publicly that 'no immediate threat has been validated.' Campus police collaborated with local law enforcement to maintain a visible security posture. The University System of Georgia Office and the FBI confirmed the threat originated overseas, aligning the SSU case with a broader pattern of internationally sourced HBCU swatting and email threats that began in earnest in 2022 and recurred in 2025-2026 waves. Some professors voluntarily moved classes online to ease student anxiety, though SSU never formally cancelled classes.
Analysis

Key Findings

Savannah State's response (soft lockdown with continued operations) contrasted sharply with Bishop State's full transition to virtual learning on the same morning, illustrating how HBCU presidents made different judgment calls about the same coordinated threat wave
The University System of Georgia and FBI determined the threat originated overseas, fitting the pattern of foreign-sourced HBCU email threats documented since the 2022 wave
President Whirl's public statement that 'no immediate threat has been validated' was an explicit attempt to reduce panic among an already-traumatized HBCU student body
Outcome
No credible threat was found. The campus remained open under a soft lockdown with additional police presence. Some professors moved classes online to alleviate student anxiety. No injuries, no evacuation of buildings, no devices located.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. News
  2. News
  3. Student Paper
  4. National News
  5. News
Cite this case

Campus Alert Archive. "Savannah State University: Bomb threat, January 22, 2026." Incident of January 22, 2026. Added May 2026; last updated September 2026. https://campusalertarchive.com/case/savannah-state-university-hbcu-email-threat-2026-01-22/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
hbcuemail-threatgeorgiasoft-lockdowncoordinated-threatfbi-investigationinternational-originpublic-r2Unfounded
Added May 2026Updated September 2026Via ingestion