Skip to content
Campus Alert Archive
ASU

Coordinated swatting email prompts campus lockdown; determined to be a hoax

AI-generated · every claim is source-linked
ALswattingemergency notificationmedium confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On September 11, 2025, Alabama State University was placed on lockdown alongside at least six other HBCUs after receiving a coordinated swatting email that falsely reported an active threat on campus. The Alabama Law Enforcement Agency confirmed the email was a swatting attempt, and the FBI classified all HBCU threats that day as hoaxes. The timing on the anniversary of the 9/11 attacks and the day after the assassination of Charlie Kirk at Utah Valley University amplified anxiety across affected campuses.

Alerts
2
Response
Killed
Injured
Institution
Alabama State University
Hbcu · AL
All ASU cases →
~4,800 students
Official alert policy
Read when and how ASU says it will use ASUALERT: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

2 messages in sequence · 1 verified verbatim

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTEmail
On behalf of Alabama State University, please be advised that the campus is closed for the remainder of the day, Thursday, September 11, 2025. Campus Police, along with other law enforcement agencies, are actively clearing all buildings on campus. In addition, all campus activities are canceled for today, September 11, 2025. This includes day and evening classes, graduate classes, rehearsals, and all other scheduled events. The John G. Hardy Student Center is closed until further notice. We appreciate your cooperation as we work closely with law enforcement to ensure the safety of our Hornet family.
Quoted verbatim by University Herald and Alabama Reflector from ASU's official September 11, 2025 statement
Notable for closing the entire campus for the day rather than just sheltering in place, a broader response than most other targeted HBCUs that day
The 'Hornet family' phrase reflects ASU's mascot and is characteristic of HBCU presidential communications, which often use community-of-care language
Specifically named the John G. Hardy Student Center as the building of focus, a level of operational detail uncommon in initial alerts
ALEA later confirmed the threat was a swatting email that 'falsely reported an active threat on campus,' not a bomb threat
ALL CLEARMulti-channel
Wording not preserved
A all clear message is documented at this point in the sequence, but its exact wording is not preserved in the public record. The public edition displays only confirmed alert text.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

On behalf of Alabama State University, please be advised that the campus is closed for the remainder of the day, Thursday, September 11, 2025. Campus Police, along with other law enforcement agencies, are actively clearing all buildings on campus. In addition, all campus activities are canceled for today, September 11, 2025. This includes day and evening classes, graduate classes, rehearsals, and all other scheduled events. The John G. Hardy Student Center is closed until further notice. We appreciate your cooperation as we work closely with law enforcement to ensure the safety of our Hornet family.

  • Sourcepresent25/25

    Final assessment

    Unanimous: Alabama State University and Campus Police identify the university and police as sender.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It names "Alabama State University" and "Campus Police", identifying the university and police as sender.
    2. present: It identifies "Alabama State University" and "Campus Police" as sources.
    3. present: It names "Alabama State University" and "Campus Police" as the sender and authority.
    4. present: It names "Alabama State University" and "Campus Police" as the sender and authority.
    5. present: It identifies "Alabama State University" and "Campus Police" as the source.
    6. present: It names "Alabama State University" and "Campus Police", the issuing authorities.
    7. present: Identifies "Alabama State University" and "Campus Police", the issuing authority.
    8. present: It names "Alabama State University" and "Campus Police", issuing authorities.
    9. present: Names "Alabama State University" and "Campus Police", identifying the sender and agency.
    10. present: It opens "On behalf of Alabama State University" and names "Campus Police", identifying the sender.
    11. present: Issued "On behalf of Alabama State University" with "Campus Police", identifying the source.
    12. present: Names "Alabama State University" and "Campus Police" as the issuer and responding authority.
    13. present: It names "Alabama State University" and "Campus Police", the issuing authorities.
    14. present: Identifies the sender on behalf of "Alabama State University" and cites "Campus Police".
    15. present: Identifies "Alabama State University" and "Campus Police" as the issuing authority.
    16. present: Identifies "Alabama State University" and "Campus Police", naming the sender.
    17. present: Names "Alabama State University" and "Campus Police" as the issuing authorities.
    18. present: It names "Alabama State University" and "Campus Police", identifying the sender and authority.
    19. present: It names "Alabama State University" and "Campus Police", the issuing authority.
    20. present: It is issued "On behalf of Alabama State University" and names "Campus Police".
    21. present: Names "Alabama State University" and "Campus Police", identifying the sender.
    22. present: It names "Alabama State University" and "Campus Police", identifying the sender and authority.
    23. present: It names "Alabama State University" and "Campus Police", identifying the source.
    24. present: Identifies "Alabama State University" and "Campus Police" as the source.
    25. present: It names "Alabama State University" and "Campus Police", identifying the source.
  • Hazardabsent0/25

    Final assessment

    Unanimous: the message announces a campus closure but never names the underlying threat.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: It announces a campus closure but never names the underlying threat.
    2. absent: No specific hazard is named; buildings are being cleared but no threat type is stated.
    3. absent: No specific threat is named, only that buildings are being cleared.
    4. absent: It announces a closure and building clearing but names no specific hazard.
    5. absent: It announces a campus closure but never names the specific threat behind it.
    6. absent: No specific hazard is named; the reason for closure and clearing buildings is not stated.
    7. absent: Cites a campus closure and building clearing but names no specific threat.
    8. absent: It announces closures and building clearing but names no specific threat in this text.
    9. absent: No specific hazard is named, only that buildings are being cleared and campus is closed.
    10. absent: No specific threat is named; it only states the campus is closed without naming the hazard.
    11. absent: No specific hazard is named; it only states the campus is closed without naming the threat.
    12. absent: No specific hazard is named; it only states the campus is closed without naming the threat.
    13. absent: No specific threat is named; the closure reason is left unstated.
    14. absent: No specific hazard is named; it announces closures without stating the threat.
    15. absent: No specific threat is named; closure is stated without naming the hazard.
    16. absent: No specific hazard is named, only that the campus is closed and buildings are being cleared.
    17. absent: No specific hazard is named; closure and clearing buildings are described without stating the threat.
    18. absent: No specific hazard is named; the reason for closure and clearing is unstated.
    19. absent: It announces closures but names no specific hazard, only buildings being cleared.
    20. absent: No specific hazard is named; buildings are being cleared but the threat is not stated.
    21. absent: No specific hazard named; refers to closure and clearing buildings without stating the threat.
    22. absent: No specific hazard is named; closure and building-clearing occur without stating bomb or threat type.
    23. absent: No specific hazard is named; buildings are being cleared but no threat is stated.
    24. absent: No specific threat is named; the closure gives no hazard.
    25. absent: It announces a campus closure but names no specific threat in this text.
  • Locationpresent25/25

    Final assessment

    All reads agree on specific locations, the campus, all buildings, and the John G. Hardy Student Center.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It names "the campus", "all buildings on campus", and "John G. Hardy Student Center", specific locations.
    2. present: It names "campus" and "The John G. Hardy Student Center", specific places.
    3. present: It names "the campus" and "The John G. Hardy Student Center", specific locations.
    4. present: It names "campus" and "The John G. Hardy Student Center", specific places.
    5. present: It names "campus", "all buildings on campus", and "The John G. Hardy Student Center".
    6. present: It names "the campus" and "The John G. Hardy Student Center", specific places.
    7. present: Names "campus", "all buildings on campus", and "John G. Hardy Student Center", specific places.
    8. present: It names "the campus" and "The John G. Hardy Student Center", specific places.
    9. present: Names "campus" and "The John G. Hardy Student Center", specific places.
    10. present: It names "the campus", "all buildings on campus", and "The John G. Hardy Student Center", locations.
    11. present: Names "campus" and "The John G. Hardy Student Center", specific places.
    12. present: It names "the campus", "all buildings on campus", and "The John G. Hardy Student Center".
    13. present: It names "the campus" and "The John G. Hardy Student Center", specific places.
    14. present: Names "campus" and "The John G. Hardy Student Center", specific places.
    15. present: Names "the campus", "all buildings on campus", and "John G. Hardy Student Center", locations.
    16. present: Names "campus" and "The John G. Hardy Student Center", specific locations.
    17. present: Names "the campus" and "The John G. Hardy Student Center", specific places.
    18. present: It names "the campus" and "The John G. Hardy Student Center", specific places.
    19. present: It names "campus" and "The John G. Hardy Student Center", specific locations.
    20. present: It names "the campus", "all buildings on campus", and "The John G. Hardy Student Center".
    21. present: Names "the campus" and "John G. Hardy Student Center", specific places.
    22. present: It names "campus", "all buildings on campus", and "The John G. Hardy Student Center", specific places.
    23. present: It names "campus" and "The John G. Hardy Student Center", specific places.
    24. present: Names "campus" and "The John G. Hardy Student Center", specific locations.
    25. present: It cites "the campus" and "The John G. Hardy Student Center", specific places.
  • Guidanceabsent5/25

    Final assessment

    Majority finds only closures and cancellations with no direct protective instruction; a minority read the closure and cancellations as implied stay-away guidance.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. absent: It states closures and cancellations but gives recipients no direct protective instruction.
    2. absent: It announces closures but gives recipients no protective action instruction.
    3. absent: It announces closures and cancellations but gives recipients no protective action.
    4. absent: It announces closures and cancellations but gives recipients no protective instruction.
    5. present: It tells recipients classes and activities are canceled and the campus is closed for the day.
    6. absent: It announces closures and cancellations but gives recipients no protective action to take.
    7. absent: Announces closures and cancellations but gives recipients no protective action instruction.
    8. absent: It announces closures and cancellations but gives recipients no direct protective action.
    9. absent: It announces closures and cancellations but gives no protective action to recipients.
    10. present: It tells recipients classes and activities are canceled and the student center is closed, implying stay-away guidance, plus appreciation for cooperation.
    11. present: Tells recipients activities are canceled and effectively to stay away, with cooperation requested.
    12. absent: It announces closures and cancellations but gives recipients no protective action instruction.
    13. absent: It announces closures and cancellations but gives no protective action to recipients.
    14. absent: It announces closures and cancellations but gives recipients no protective action to take.
    15. present: Tells the community the campus is closed and activities canceled, an implicit stay-away action.
    16. present: Instructs that campus and activities are canceled and the center is closed, directing recipients away.
    17. absent: No protective action is directed at recipients, only announcements of closures and cancellations.
    18. absent: It announces closures and cancellations but gives no protective action to recipients.
    19. absent: It announces closures and cancellations; no protective action instruction to recipients.
    20. absent: It announces closures and cancellations but gives recipients no protective action to take.
    21. absent: No protective action instructed to recipients; describes closures and authority actions.
    22. absent: It announces closures and cancellations but gives recipients no protective action to take.
    23. absent: It announces closures and cancellations but gives no protective instruction to recipients.
    24. absent: Announces closures and cancellations; gives recipients no protective action instruction.
    25. absent: It informs of closures and cancellations but gives recipients no protective instruction.
  • Timepresent25/25

    Final assessment

    Unanimous: a specific date is stated, for the remainder of the day, Thursday, September 11, 2025.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: It says "for the remainder of the day, Thursday, September 11, 2025", a specific date.
    2. present: "for the remainder of the day, Thursday, September 11, 2025" is a specific date.
    3. present: It states the campus is closed "Thursday, September 11, 2025", a specific date.
    4. present: It cites "Thursday, September 11, 2025" and "today", date/recency cues.
    5. present: It gives the date "Thursday, September 11, 2025" and "for the remainder of the day".
    6. present: It gives the date "Thursday, September 11, 2025" and "the remainder of the day", clear time references.
    7. present: Gives "the remainder of the day, Thursday, September 11, 2025", a date and time reference.
    8. present: It gives the date "Thursday, September 11, 2025" and "the remainder of the day", time references.
    9. present: Says "for the remainder of the day, Thursday, September 11, 2025", a specific date.
    10. present: It dates the closure "Thursday, September 11, 2025" and "for the remainder of the day", time references.
    11. present: Gives the date "Thursday, September 11, 2025" and "remainder of the day", conveying when.
    12. present: It gives "Thursday, September 11, 2025" and "for the remainder of the day", date and recency cues.
    13. present: It gives the date "Thursday, September 11, 2025" and "for the remainder of the day", time cues.
    14. present: Specifies "the remainder of the day, Thursday, September 11, 2025", clear date and time references.
    15. present: Gives the date "Thursday, September 11, 2025" and "remainder of the day", conveying when.
    16. present: Gives the date "Thursday, September 11, 2025" and "remainder of the day", conveying when.
    17. present: Gives "Thursday, September 11, 2025" and "for the remainder of the day", date and recency cues.
    18. present: It cites "the remainder of the day, Thursday, September 11, 2025", a date and time.
    19. present: It gives dates "Thursday, September 11, 2025" and "for the remainder of the day", timing.
    20. present: It gives the date "Thursday, September 11, 2025" and "for the remainder of the day".
    21. present: Gives date "Thursday, September 11, 2025" and "for the remainder of the day".
    22. present: It gives the date "Thursday, September 11, 2025" and "for the remainder of the day", conveying timing.
    23. present: It gives the date "Thursday, September 11, 2025" and "for the remainder of the day", time references.
    24. present: Gives the date "Thursday, September 11, 2025" and "remainder of the day", time references.
    25. present: It cites "the remainder of the day, Thursday, September 11, 2025", a date and time.
  • Impactabsent0/25

    Final assessment

    Absent by unanimous agreement: a campus-closure notice with building-clearing details states no harm, danger, or potential consequence.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: Announces a closure and building clearing without stating any danger or consequence.
    2. absent: Describes campus closure and building clearing but states no specific harm or danger.
    3. absent: It announces a campus closure and building clearing but does not state any harm or how dangerous the threat is.
    4. absent: It announces a campus closure and building clearing but never states what the threat could do.
    5. absent: Announces campus closure and building clearing for safety but states no specific harm or threat consequence.
    6. absent: It announces campus closure and building clearing for safety without stating any specific harm or threat severity.
    7. absent: Describes closure and building clearing for safety but states no specific danger or harm.
    8. absent: Announces campus closure and building clearing but states no danger or potential harm.
    9. absent: Announces campus closure and building clearing as precaution without stating the threat's danger or any harm.
    10. absent: Announces closure and building clearing for safety but states no specific danger or harm.
    11. absent: Announces campus closure and building clearing for safety but states no specific danger or consequence.
    12. absent: Announces campus closure and building clearing but states no danger or potential harm.
    13. absent: Announces closure and building clearing for safety but states no specific danger or consequence.
    14. absent: Announces campus closure and building clearing but states no specific danger or consequence.
    15. absent: It announces closure and building clearing for safety but states no specific danger or consequence.
    16. absent: Announces closure and building clearing for safety but states no specific danger or consequence.
    17. absent: Announces closure and building clearing but states no danger or consequence explicitly.
    18. absent: Announces campus closure and building clearing but states no danger or consequence.
    19. absent: It announces a campus closure and building clearing for safety but states no specific danger or harm.
    20. absent: Announces campus closure and building clearing but states no specific danger or consequence.
    21. absent: Announces campus closure and building clearing but states no harm or potential consequence.
    22. absent: It announces campus closure and building clearing for safety but states no specific danger or consequence.
    23. absent: Announces closure and building clearing without stating what danger people face.
    24. absent: Announces closure and building clearing for safety but states no specific danger or harm.
    25. absent: It announces a campus closure and building clearing but states no specific danger or harm.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On September 11, 2025, Alabama State University was among at least seven HBCUs placed on lockdown after receiving coordinated hoax threats. ALEA later confirmed the ASU threat was specifically a swatting email that 'falsely reported an active threat on campus', characterizing it as a swatting incident rather than a traditional bomb threat. The timing on the anniversary of the September 11 attacks (and one day after the assassination of Charlie Kirk at Utah Valley University on September 10) added significant anxiety to an already alarming situation. The FBI quickly classified all threats as hoaxes, and Inside Higher Ed reported on the broader pattern of HBCUs being disproportionately targeted. Capital B News documented that all lockdowns were lifted throughout the day; ASU issued the all-clear around 1 PM CDT but kept residential students sheltering in place. The incident was part of an escalating pattern: a UNCF policy brief found that half of the nation's 101 HBCUs had received targeted threats over the preceding three years. A second wave later in September targeted additional HBCUs including Morgan State, Southern University, Delaware State, Prairie View A&M, and Alabama A&M, with threats specifically aimed at university libraries.
Analysis

Key Findings

The threats were timed on the 24th anniversary of the September 11 attacks and one day after the Charlie Kirk assassination at UVU, amplifying fear and anxiety
Alabama State was part of a coordinated campaign targeting at least seven HBCUs simultaneously
ALEA classified the ASU threat specifically as a swatting email ('falsely reported an active threat on campus') not a bomb threat
The incident was followed by a second wave later in September targeting additional HBCUs, with threats directed at campus libraries
Outcome
The FBI determined the threat was a hoax. ASU lifted its lockdown after law enforcement completed a sweep of campus. No explosives or threats were found.
Provenance

Sources

  1. national media
  2. national media
  3. national media
  4. national media
  5. News
  6. national media
  7. national media
Cite this case

Campus Alert Archive. "Alabama State University: Coordinated swatting email prompts campus lockdown; determined to be a hoax." Incident of September 11, 2025. Added April 2026; last updated May 2026. https://campusalertarchive.com/case/alabama-state-university-bomb-threat-2025-09-11/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattinghbcucoordinated-attack9-11-anniversaryfbi-investigationalabamahoax2025-hbcu-wavepost-charlie-kirkswatting-emailHoax
Added April 2026Updated May 2026Via ingestion