Campus Alert Archive
EvCC

Emailed threat citing explosives and firearms prompts 'Not a drill' lockdown

AI-generated · every claim is source-linked
WAthreat of violenceemergency notificationmedium confidence
Compare →
UnfoundedNo evidence of an actual threat was found. The institutional response is documented because the alert communication is identical to what would occur during a real incident.

On the morning of May 9, 2022, Everett Community College in Washington went into lockdown after a threatening email referencing explosives and firearms was discovered, with a 7:33 a.m. PDT alert stating 'Not a drill.' Skagit Valley College locked down its campuses around the same time over a related email. Police found no credible threat, and EvCC lifted its lockdown by 8:58 a.m. PDT but stayed closed for the day.

Alerts
2
Response
—
Killed
—
Injured
—
Institution
Everett Community College
Community College · WA
All EvCC cases →
~19,000 students
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

INITIAL ALERTTwitter/X
Verified verbatim@EverettCC on X (verbatim raw t.co)164 chars
EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu
My Everett News quoted the 7:33 a.m. PDT alert verbatim: the main campus was in lockdown due to a threat to campus, with the staccato 'Not a drill. Lock doors. Seek shelter. Avoid being seen or heard.' instructions.
The threatening email had been sent around 8 p.m. Sunday, May 8, and was discovered by staff Monday morning, creating an overnight delay between threat and alert.
The 'avoid being seen or heard' instruction mirrors standardized Run-Hide-Fight lockdown guidance.
ALL CLEARTwitter/X+1h 25m
Verified verbatim@EverettCC on X (verbatim lockdown ended)164 chars
EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu
HeraldNet reported that at 8:58 a.m. PDT EvCC tweeted the lockdown had been lifted but that in-person classes and services were canceled for the rest of the day.
This is a genuine all-clear because it lifts the lockdown, though the campus closure continued for operational reasons after the threat was cleared.
A follow-up tweet at 9:39 a.m. PDT confirmed all campuses and centers would be closed for the remainder of Monday.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu

  • Sourcepresent23/25

    Final assessment

    A strong majority (23 of 25) finds the element is present: most reads accept EvCC naming its main campus as identifying the sender, though a couple want a distinct authority or signature.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It names "EvCC's main campus" as being in lockdown.
    2. present: It names "EvCC's main campus" as the issuing institution.
    3. present: It names "EvCC's main campus", identifying the institution.
    4. present: It names "EvCC's main campus in Everett", identifying the college.
    5. present: "EvCC" naming its main campus identifies the sender.
    6. present: It names "EvCC's main campus in Everett", identifying the issuing institution.
    7. present: It names "EvCC's main campus", identifying the sender.
    8. present: It names "EvCC's main campus in Everett" identifying the institution.
    9. present: "EvCC" names the institution as the subject of the lockdown.
    10. present: It names "EvCC's main campus", the issuing institution.
    11. present: It names "EvCC's main campus in Everett" as in lockdown.
    12. present: It names "EvCC's main campus in Everett" as the issuing institution.
    13. present: It names "EvCC", the college.
    14. present: It names "EvCC's main campus", the issuing institution.
    15. present: It names "EvCC's main campus in Everett", the institution.
    16. present: It names "EvCC's main campus" being in lockdown, identifying the issuer.
    17. present: It names "EvCC's main campus", the institution, as sender.
    18. present: It names "EvCC's main campus".
    19. present: It names "EvCC's main campus in Everett" as the sender subject.
    20. present: It names "EvCC's main campus".
    21. absent: No sender, authority, or branded signature is named in the text.
    22. present: Names "EvCC's main campus" identifying the issuing college.
    23. present: Names "EvCC's main campus" as the institution.
    24. absent: No sender tag, agency, or branded signature identifies who issued this lockdown message.
    25. present: It names "EvCC's main campus", identifying the college.
  • Hazardabsent0/25

    Final assessment

    All 25 reads agree the element is absent: it cites a threat to campus but names no specific hazard.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: It cites "a threat to campus" but names no specific hazard.
    2. absent: It says "a threat to campus" but names no specific hazard.
    3. absent: It cites "a threat to campus" generically without naming a hazard.
    4. absent: It says "a threat to campus" but names no specific hazard.
    5. absent: It says "a threat to campus" but names no specific threat.
    6. absent: It cites "a threat to campus" generically and names no specific hazard.
    7. absent: It refers only to "a threat to campus" with no specific hazard named.
    8. absent: It says "a threat to campus" but names no specific hazard.
    9. absent: It says "a threat to campus" but names no specific hazard.
    10. absent: It says "a threat to campus" but names no specific hazard.
    11. absent: It cites "a threat to campus" but names no specific hazard.
    12. absent: It says only "a threat to campus", which is generic and does not name the hazard.
    13. absent: It cites "a threat to campus" but names no specific hazard type.
    14. absent: It says "a threat to campus" but names no specific hazard.
    15. absent: It says "a threat to campus" but never names a specific threat.
    16. absent: It refers to "a threat to campus" but names no specific hazard.
    17. absent: It says "a threat to campus" only, naming no specific hazard.
    18. absent: It says "a threat to campus" which is generic, naming no specific hazard.
    19. absent: It references "a threat to campus" without naming a specific hazard.
    20. absent: It says "a threat to campus" but names no specific hazard.
    21. absent: It says "a threat to campus" but names no specific hazard.
    22. absent: Says "a threat to campus"; no specific hazard is named.
    23. absent: Says "a threat to campus", which is generic and names no specific hazard.
    24. absent: It says "a threat to campus" but names no specific hazard.
    25. absent: It cites "a threat to campus" only, naming no specific hazard.
  • Locationpresent25/25

    Final assessment

    All 25 reads agree the element is present: it names EvCC main campus in Everett.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It names "EvCC's main campus in Everett".
    2. present: It locates it at "EvCC's main campus in Everett".
    3. present: It says "main campus in Everett".
    4. present: It says "main campus in Everett".
    5. present: It references "EvCC's main campus in Everett".
    6. present: It specifies "EvCC's main campus in Everett", a location.
    7. present: It names "EvCC's main campus in Everett", a specific place.
    8. present: It names "EvCC's main campus in Everett".
    9. present: It names "EvCC's main campus in Everett".
    10. present: It names "EvCC's main campus in Everett".
    11. present: It specifies "EvCC's main campus in Everett".
    12. present: It names "EvCC's main campus in Everett".
    13. present: It names "EvCC's main campus in Everett".
    14. present: It names "EvCC's main campus in Everett", a specific place.
    15. present: It locates it at "EvCC's main campus in Everett".
    16. present: It names "EvCC's main campus in Everett", a specific place.
    17. present: It names "EvCC's main campus in Everett", a specific place.
    18. present: It names "EvCC's main campus in Everett".
    19. present: It locates it at "EvCC's main campus in Everett".
    20. present: It names "EvCC's main campus in Everett".
    21. present: It names "EvCC's main campus in Everett", a specific place.
    22. present: Names "EvCC's main campus in Everett".
    23. present: Locates it at "EvCC's main campus in Everett".
    24. present: It names "EvCC's main campus in Everett", a specific place.
    25. present: It locates it at "EvCC's main campus in Everett".
  • Guidancepresent25/25

    Final assessment

    All 25 reads agree the element is present: it instructs recipients to lock doors, seek shelter, and avoid being seen or heard.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    2. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    3. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    4. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    5. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard".
    6. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard.", protective actions.
    7. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard", protective actions.
    8. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    9. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard.".
    10. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard."
    11. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard".
    12. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    13. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard".
    14. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard", protective actions.
    15. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    16. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard.", protective actions.
    17. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    18. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    19. present: It instructs recipients to "Lock doors. Seek shelter. Avoid being seen or heard".
    20. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    21. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    22. present: Instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    23. present: Instructs "Lock doors. Seek shelter. Avoid being seen or heard".
    24. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard", protective actions.
    25. present: It instructs "Lock doors. Seek shelter. Avoid being seen or heard".
  • Timeabsent0/25

    Final assessment

    All 25 reads agree the element is absent: no clock time, date, or recency cue appears.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears.
    2. absent: No clock time, date, or recency cue appears.
    3. absent: No clock time, date, or recency cue appears in the text.
    4. absent: No clock time, date, or recency cue appears.
    5. absent: No clock time, date, or recency cue appears in the text.
    6. absent: No clock time, date, or recency cue appears in the text.
    7. absent: No clock time, date, or recency cue appears.
    8. absent: No clock time, date, or recency cue appears in the text.
    9. absent: No clock time, date, or recency cue appears.
    10. absent: No clock time, date, or recency cue appears, "Not a drill" is not a time cue.
    11. absent: No clock time, date, or recency cue appears.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency cue appears in the text.
    14. absent: No clock time, date, or recency cue appears.
    15. absent: No clock time, date, or recency cue appears in the text.
    16. absent: No clock time, date, or recency cue appears in the text.
    17. absent: No clock time, date, or recency cue appears.
    18. absent: No clock time, date, or recency cue appears.
    19. absent: No clock time, date, or recency cue appears.
    20. absent: No clock time, date, or recency cue appears.
    21. absent: No clock time, date, or recency cue appears in the message.
    22. absent: No clock time, date, or recency cue appears.
    23. absent: No clock time, date, or recency cue appears; "Not a drill" is not time.
    24. absent: No clock time, date, or recency cue appears in the text.
    25. absent: No clock time, date, or recency cue appears.
  • Impactabsent2/25

    Final assessment

    Absent by a strong 23 to 2 majority: it reports a lockdown due to a threat and to avoid being seen but states no explicit harm or severity of the threat.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: It reports a lockdown due to a threat and says avoid being seen but states no explicit harm or severity.
    2. absent: This reports a lockdown due to a threat with shelter guidance but states no explicit harm or what could happen.
    3. absent: Reports a lockdown due to a threat with shelter and avoid-being-seen guidance but states no explicit harm.
    4. absent: It reports a lockdown due to a threat and gives precautions but states no harm or explicit danger.
    5. absent: Lockdown over a threat with avoid being seen guidance but states no explicit harm or consequence.
    6. absent: It reports a lockdown due to a threat with lock and shelter guidance but states no explicit harm or severity.
    7. absent: Reports a lockdown due to a threat with lock-doors and avoid-being-seen guidance but states no specific harm or severity.
    8. absent: Lockdown due to a threat with shelter guidance but does not state what harm the threat could cause.
    9. absent: Says lockdown due to a threat and avoid being seen but states no explicit harm or consequence.
    10. present: A lockdown due to a threat to campus with instructions to avoid being seen conveys a danger to people.
    11. absent: Reports a lockdown due to a threat and not a drill with shelter guidance but states no specific harm or consequence.
    12. absent: It reports a lockdown due to a threat with shelter guidance but states no explicit harm or consequence.
    13. present: A lockdown with avoid being seen or heard implies a violent threat capable of harming people who are seen.
    14. absent: Reports a lockdown due to a threat with shelter guidance but states no explicit harm or what the threat could do.
    15. absent: Reports a lockdown due to a threat with guidance to avoid being seen but states no explicit harm or consequence.
    16. absent: Reports a lockdown due to a threat and directs avoiding being seen but states no specific danger or harm.
    17. absent: Reports a lockdown due to a threat and shelter guidance but states no specific harm or consequence.
    18. absent: Reports a lockdown due to a threat with avoid-being-seen guidance but states no explicit harm or danger.
    19. absent: Reports a lockdown due to a threat and gives guidance but states no harm or severity.
    20. absent: Reports a lockdown due to a threat with not a drill and shelter guidance but states no specific harm.
    21. absent: Lockdown due to a threat with avoid being seen guidance but no statement of the threat's potential harm.
    22. absent: Reports a lockdown due to a threat with shelter guidance but states no explicit harm or consequence.
    23. absent: Reports a lockdown due to a threat with shelter guidance but states no hazard or potential harm.
    24. absent: Lockdown due to a threat with shelter guidance but states no specific harm or severity.
    25. absent: It reports a lockdown due to a threat with guidance to avoid being seen but does not state what the threat could do.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Everett Community College in Snohomish County, Washington, locked down its main campus on the morning of May 9, 2022 after staff discovered a threatening email sent the prior evening that referenced explosives and firearms and included racist language. EvCC's 7:33 a.m. PDT alert told the campus it was 'Not a drill' and to lock doors, seek shelter, and avoid being seen or heard. Skagit Valley College locked down all its campuses around the same time over a related threat, and several area colleges had received similar emails the previous Friday. Police found no credible threat; EvCC lifted its lockdown at 8:58 a.m. PDT and closed for the day. The episode shows a coordinated multi-college threat wave and the lag created when a threat arrives overnight and is only seen the next morning.
Analysis

Key Findings

EvCC sent a 7:33 a.m. PDT lockdown alert on May 9, 2022 stating 'Not a drill' after an overnight threatening email referencing explosives and firearms was discovered
Skagit Valley College locked down its campuses around the same time over a related threat, part of a wave that hit several area colleges
EvCC lifted the lockdown at 8:58 a.m. PDT on May 9, 2022 but kept the campus closed for the day, confirmed by a 9:39 a.m. PDT follow-up
The case highlights the overnight-threat lag problem: the email was sent Sunday evening but only seen and acted on Monday morning
Outcome
Everett police and other agencies swept the campuses and concluded there was no credible threat. EvCC lifted its lockdown at 8:58 a.m. and announced a full-day closure at 9:39 a.m. Several area colleges had received similar emails the prior Friday.
Provenance

Sources

  1. News
    'Threat' sends Everett Community College into lockdown - HeraldNet
    heraldnet.com
    archived copy
  2. News
    Online Threat Forces Closure Of Everett Community College Campus - My Everett News
    myeverettnews.com
    archived copy
  3. News
    UPDATE: Skagit Valley College, others in region received email threat prior to lockdown - Cascadia Daily News
    cascadiadaily.com
    archived copy
  4. News
    'Not a drill:' Threat spurs lockdown at Everett Community College, Skagit Valley College - KOMO News
    komonews.com
    archived copy
  5. Source
    2 Community Colleges Cancel Classes After Threats - Inside Higher Ed
    insidehighered.com
    archived copy
  6. Social
    @EverettCC on X (verbatim lockdown ended)
    x.com
    archived copy
Cite this case

Campus Alert Archive. "Everett Community College: Emailed threat citing explosives and firearms prompts 'Not a drill' lockdown." Incident of May 9, 2022. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/everett-community-college-email-threat-lockdown-2022-05-09/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
threat-of-violencelockdowncommunity-collegewashingtoneverettemailed-threatnot-a-drillunfoundedemergency-notificationUnfounded
Added May 2026Updated July 2026Via ingestion