Skip to content
Campus Alert Archive
NIU

Emailed bomb and shooting threat against the business school deemed not credible

AI-generated · every claim is source-linked
ILbomb threatadvisorymedium confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On February 26, 2024, faculty and staff of NIU's College of Business received an anonymous email threatening an act of violence at Barsema Hall, including bomb and active shooter threats. After investigation by NIU Police with support from Illinois and federal authorities, the threat was determined to be not credible. The email explicitly requested a large police response to gain media attention.

Alerts
2
Response
Killed
Injured
Institution
Northern Illinois University
Public R2 · IL
All NIU cases →
~16,000 studentsNIU Safety Notification
Documented Timeline

Alert Sequence

2 messages in sequence · 1 verified verbatim

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTEmail
You will see a heavy police presence in the area as we investigate. Be prepared to take additional safety precautions and report any suspicious devices or persons you see by calling 911. Do not touch any suspicious backpacks, boxes, etc. The NIU Police is not mandating an evacuation at this time. Please don't call 911 or 815-753-1212 for information as the NIU Police will provide updates via NIU SOCIAL or your NIU email account.
Verbatim text from the NIU Safety Notification as reproduced by WJOL Newsradio from the official safety bulletin, February 26, 2024
NIU Police did not mandate an evacuation but instructed people not to touch suspicious items and to avoid calling 911 for information
The anonymous email was sent to College of Business faculty and staff with a demand for large police presence to gain 'international news' attention
ALL CLEAREmail
Wording not preserved
A all clear message is documented at this point in the sequence, but its exact wording is not preserved in the public record. The public edition displays only confirmed alert text.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

You will see a heavy police presence in the area as we investigate. Be prepared to take additional safety precautions and report any suspicious devices or persons you see by calling 911. Do not touch any suspicious backpacks, boxes, etc. The NIU Police is not mandating an evacuation at this time. Please don't call 911 or 815-753-1212 for information as the NIU Police will provide updates via NIU SOCIAL or your NIU email account.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the source is present; the NIU Police are named as the responding authority.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Names "The NIU Police" as the responding authority.
    2. present: It names "The NIU Police", the issuing authority.
    3. present: Names "The NIU Police", the responding authority.
    4. present: It names "The NIU Police", a responding authority.
    5. present: Names "The NIU Police" as the responding authority.
    6. present: It names "The NIU Police", the issuing authority.
    7. present: It names "The NIU Police", the responding authority.
    8. present: References "The NIU Police" and "NIU email account", identifying the sender.
    9. present: Names "The NIU Police", the responding authority.
    10. present: It names "The NIU Police" and "NIU Police" as the issuing authority.
    11. present: It names "NIU Police", the responding authority.
    12. present: Names "The NIU Police" as the responding authority.
    13. present: Names "The NIU Police", the issuing authority.
    14. present: It names "The NIU Police" as the responding authority.
    15. present: It names "The NIU Police", the issuing authority.
    16. present: Names "The NIU Police" as the responding authority.
    17. present: It names "The NIU Police" as the authority issuing.
    18. present: It names "The NIU Police", the responding authority.
    19. present: It references "The NIU Police" as the responding authority.
    20. present: It references "The NIU Police" and "NIU email account", identifying the authority and institution.
    21. present: Names "The NIU Police", the responding/issuing authority.
    22. present: Names "The NIU Police" as the responding authority.
    23. present: It names "The NIU Police" as the responsible authority.
    24. present: It names "The NIU Police", the responding authority.
    25. present: It names "The NIU Police" as the issuing authority.
  • Hazardpresent20/25

    Final assessment

    A strong majority finds the hazard present via suspicious devices and backpacks or boxes; a minority calls it an unconfirmed investigation.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: References "suspicious devices" and suspicious backpacks/boxes, a specific bomb-type hazard.
    2. present: It references "suspicious devices" and not touching "suspicious backpacks, boxes", a specific threat.
    3. present: References "suspicious devices" and not touching "suspicious backpacks, boxes", a specific bomb-threat hazard.
    4. present: It references "suspicious devices" and not touching "suspicious backpacks, boxes", a specific threat.
    5. absent: Refers to "suspicious devices or persons" but names no confirmed specific hazard, only an investigation.
    6. present: It references "suspicious devices" and "suspicious backpacks, boxes", a specific bomb hazard.
    7. present: It references "suspicious devices" and "suspicious backpacks, boxes", a bomb/explosive hazard.
    8. present: Warns to report "suspicious devices" and "suspicious backpacks, boxes", implying a bomb threat hazard.
    9. present: References "suspicious devices" and "suspicious backpacks, boxes", an explosive-device hazard.
    10. present: It refers to "suspicious devices" and "suspicious backpacks, boxes", indicating a bomb threat.
    11. present: It refers to "suspicious devices" and "suspicious backpacks, boxes", a bomb-type hazard.
    12. present: References "suspicious devices" and "suspicious backpacks, boxes", a specific threat.
    13. absent: Refers to "suspicious devices" and an investigation but names no confirmed specific hazard like bomb or fire.
    14. present: It implies an explosive threat by warning of "suspicious devices" and "suspicious backpacks, boxes", naming the hazard.
    15. absent: It references "suspicious devices" and an investigation but names no confirmed specific hazard.
    16. present: References "suspicious devices" and "suspicious backpacks, boxes", indicating a bomb threat.
    17. present: It references "suspicious devices" and a bomb-threat investigation, a specific threat.
    18. present: It references "suspicious devices" and "suspicious backpacks, boxes", a specific bomb-related threat.
    19. absent: It mentions "suspicious devices" generally but the message itself names no specific hazard in its own statement.
    20. present: It references "suspicious devices" and "suspicious backpacks, boxes", naming a bomb/explosive type hazard.
    21. absent: Refers to "suspicious devices" and "suspicious backpacks" but names no confirmed hazard.
    22. present: References investigating and "suspicious devices", implying a bomb threat hazard.
    23. present: It refers to "suspicious devices" and investigation, naming the bomb/explosive hazard context.
    24. present: It references "suspicious devices" and "suspicious backpacks, boxes", a bomb-type threat.
    25. present: It references "suspicious devices" and "suspicious backpacks, boxes", indicating a bomb threat hazard.
  • Locationpresent25/25

    Final assessment

    All 25 reads agree a location is given, a heavy police presence in the area.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Says "a heavy police presence in the area".
    2. present: It says "in the area", a location reference.
    3. present: Says "in the area", a location reference.
    4. present: It says "in the area", a place reference.
    5. present: Says "in the area", referencing a location near campus where police are present.
    6. present: It says "a heavy police presence in the area", a location reference.
    7. present: It refers to "the area" of investigation, a location reference.
    8. present: Says "in the area" of campus and references NIU campus, a location cue.
    9. present: Locates it "in the area" with "heavy police presence".
    10. present: It says "a heavy police presence in the area".
    11. present: It says "a heavy police presence in the area".
    12. present: Locates it as "in the area" with "heavy police presence".
    13. present: Says "in the area", a location reference.
    14. present: It references "the area" where police presence will be seen.
    15. present: It says police presence "in the area", a location reference.
    16. present: Says "a heavy police presence in the area", a location reference.
    17. present: It says "in the area" and references the campus implicitly via NIU email.
    18. present: It locates "a heavy police presence in the area".
    19. present: It says "heavy police presence in the area", referencing the area.
    20. present: It says you will see "heavy police presence in the area", referencing the area.
    21. present: Says "in the area", a location cue.
    22. present: Says "in the area", referencing the affected place.
    23. present: It says people "will see a heavy police presence in the area".
    24. present: It says "in the area" and "campus", location references.
    25. present: It says you will see police "in the area", locating it on campus.
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is present; recipients are told not to touch suspicious items and to report them by calling 911.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs "Do not touch any suspicious backpacks, boxes" and report by calling 911.
    2. present: It instructs recipients to "report any suspicious devices" and "Do not touch any suspicious backpacks".
    3. present: Instructs recipients to "report any suspicious devices" and "Do not touch any suspicious backpacks".
    4. present: It instructs "report any suspicious devices" and "Do not touch any suspicious backpacks", protective actions.
    5. present: Instructs recipients "Do not touch any suspicious backpacks" and to call 911 to report.
    6. present: It instructs "Do not touch any suspicious backpacks" and to report by "calling 911".
    7. present: It instructs "Do not touch any suspicious backpacks" and report by "calling 911", protective actions.
    8. present: Instructs "Do not touch any suspicious backpacks" and "report" them, protective actions.
    9. present: Instructs "Do not touch any suspicious backpacks, boxes" and "calling 911".
    10. present: It instructs to "report any suspicious devices" and "Do not touch any suspicious backpacks".
    11. present: It tells recipients "Do not touch any suspicious backpacks" and to call 911.
    12. present: Instructs recipients: "Do not touch any suspicious backpacks, boxes" and call 911 to report.
    13. present: Instructs "report any suspicious devices" and "Do not touch any suspicious backpacks", protective actions.
    14. present: It instructs recipients to "report any suspicious devices" and "Do not touch any suspicious backpacks".
    15. present: It instructs recipients to "report any suspicious devices", "Do not touch any suspicious backpacks", protective actions.
    16. present: Instructs "Do not touch any suspicious backpacks, boxes" and to report by "calling 911".
    17. present: It instructs "report any suspicious devices", "Do not touch any suspicious backpacks".
    18. present: It tells recipients to "report any suspicious devices" and "Do not touch any suspicious backpacks".
    19. present: It instructs recipients to "report any suspicious devices or persons" and not to touch them.
    20. present: It instructs "Do not touch any suspicious backpacks" and call 911, protective actions.
    21. present: Tells recipients "Do not touch any suspicious backpacks" and report by calling 911.
    22. present: Instructs "Do not touch any suspicious backpacks" and to "report" by calling 911.
    23. present: It instructs "Do not touch any suspicious backpacks, boxes" and to report by calling 911.
    24. present: It instructs "Do not touch any suspicious backpacks" and to report by "calling 911".
    25. present: It instructs recipients to "report any suspicious devices" and "Do not touch any suspicious backpacks".
  • Timepresent19/25

    Final assessment

    A majority finds time present via the recency cue at this time, though a minority sees no clock time or date.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: Says "at this time", a recency cue.
    2. present: It says "at this time", conveying present recency.
    3. present: Says "at this time", a recency cue.
    4. present: It uses "at this time", conveying recency.
    5. present: Uses "at this time", a recency cue.
    6. present: It says "at this time" regarding the evacuation decision, a recency cue.
    7. absent: No clock time, date, or recency cue such as "now" appears in the text.
    8. present: Says "at this time", a recency cue.
    9. present: Uses "at this time", a recency cue.
    10. present: It says "at this time", a recency cue.
    11. present: It says "at this time", a recency cue.
    12. present: Says "at this time", conveying current status.
    13. absent: No clock time, date, or recency word appears in the text.
    14. present: It uses "at this time", a recency cue.
    15. absent: No clock time, date, or recency cue such as "now" appears in the text.
    16. present: Uses recency cues "as we investigate" and "is not mandating an evacuation at this time".
    17. present: It says "at this time", a recency cue.
    18. present: It uses "at this time" describing that evacuation is not currently mandated.
    19. present: It says it will provide updates and references the present investigation, but uses "at this time", a recency cue.
    20. absent: No clock time, date, or recency cue such as "now" appears in the text.
    21. present: Says "at this time", conveying present recency.
    22. present: Uses recency cue "at this time".
    23. absent: No clock time, date, or recency cue appears in the text.
    24. present: It says NIU Police are "not mandating an evacuation at this time", a recency cue.
    25. absent: No clock time, date, or recency word such as "now" appears.
  • Impactpresent25/25

    Final assessment

    Present by unanimous agreement. The alert warns of suspicious devices and instructs people not to touch suspicious backpacks or boxes, conveying the implied danger of an explosive harming people.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: It warns of suspicious devices and not to touch suspicious backpacks or boxes, implying explosive danger to people.
    2. present: Warns of suspicious devices and not to touch suspicious backpacks, implying explosive danger and potential harm.
    3. present: Warns of suspicious devices not to touch and to take additional safety precautions, implying explosive danger to people.
    4. present: Warns of possible suspicious devices and not touching suspicious backpacks, implying explosive danger.
    5. present: It warns of suspicious devices to not touch and to take additional safety precautions, implying explosive danger from possible devices.
    6. present: It warns about suspicious devices, tells people not to touch suspicious backpacks or boxes, and to take safety precautions, implying the danger of an explosive.
    7. present: Warns to take safety precautions and not to touch suspicious devices, implying explosive danger to people.
    8. present: Warns of suspicious devices and not to touch them, implying danger from a possible bomb.
    9. present: Warns against touching suspicious devices and to take additional safety precautions, implying a dangerous device hazard.
    10. present: Warning not to touch suspicious devices and to take additional safety precautions during a bomb investigation implies the danger of an explosive device.
    11. present: It warns of suspicious devices and tells people not to touch suspicious backpacks or boxes, implying explosive danger.
    12. present: Warns of suspicious devices and not to touch suspicious backpacks or boxes, implying explosive danger to people.
    13. present: It warns of suspicious devices and not to touch them, implying an explosive danger to people.
    14. present: Warns of suspicious devices and to not touch suspicious backpacks or boxes, implying explosive danger.
    15. present: It warns of suspicious devices and not to touch suspicious backpacks or boxes, implying an explosive danger.
    16. present: Warns of suspicious devices and to not touch suspicious backpacks or boxes, implying explosive-device danger.
    17. present: Warns of suspicious devices and not to touch suspicious backpacks or boxes, implying explosive danger.
    18. present: It warns of suspicious devices and tells people not to touch them, implying an explosive danger.
    19. present: It warns of suspicious devices and not touching suspicious backpacks or boxes, implying explosive danger.
    20. present: Warns of suspicious devices and not to touch backpacks or boxes, implying explosive danger.
    21. present: It warns of suspicious devices and tells people not to touch suspicious backpacks or boxes, implying explosive danger.
    22. present: It warns of suspicious devices and tells people not to touch suspicious backpacks or boxes, implying an explosive danger.
    23. present: Warns of suspicious devices and tells people not to touch suspicious backpacks or boxes, strongly implying explosive danger.
    24. present: Warns about suspicious devices and not touching backpacks or boxes, implying explosive danger.
    25. present: Warns to not touch suspicious devices and report suspicious persons, implying an explosive danger requiring precautions.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On the morning of February 26, 2024, faculty and staff of NIU's College of Business received an anonymous email threatening violence at Barsema Hall on the DeKalb campus. The email stated there would be 'an act of violence committed today' and requested a large police presence in hopes of gaining international news attention. NIU Police investigated with support from state and federal authorities and determined the threat was not credible. No evacuation was mandated, though NIU police advised people to be alert and report suspicious items or activity. The university confirmed that at least one other university outside of Illinois received the exact same message that day, and an Ivy League university had received a similar threat one week prior. The incident occurred just days after the 16th anniversary of the February 14, 2008, mass shooting at NIU that killed five students in Cole Hall.
Analysis

Key Findings

The anonymous email explicitly requested a large police response to attract media attention, revealing the hoax motive
At least one other university outside Illinois received an identical email the same day
NIU did not evacuate or close campus, instead advising vigilance while investigating the threat
Outcome
The threat was deemed not credible. No evacuation was ordered, and classes continued as normal. NIU police confirmed that at least one other university outside Illinois received an identical email the same day, and an Ivy League university had received a similar threat the prior week.
Provenance

Sources

  1. Student Paper
  2. News
  3. News
  4. News
Cite this case

Campus Alert Archive. "Northern Illinois University: Emailed bomb and shooting threat against the business school deemed not credible." Incident of February 26, 2024. Added May 2026. https://campusalertarchive.com/case/northern-illinois-university-bomb-threat-2024-02-26/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
bomb-threatactive-shooter-threathoaxemail-threatillinoiscopycat-threatno-evacuationattention-seekingHoax
Added May 2026Updated May 2026Via ingestion