Skip to content
Campus Alert Archive
Northwestern

Report of shots fired in a library bathroom determined to be unfounded

AI-generated · every claim is source-linked
ILswattingemergency notificationhigh confidence
UnfoundedNo evidence of an actual threat was found. The institutional response is documented because the alert communication is identical to what would occur during a real incident.

On the evening of Friday, September 5, 2025, the Evanston Police Department responded to a call of shots fired in a bathroom inside Northwestern University's Seeley G. Mudd Library at approximately 6:20 p.m. CDT. Northwestern's Department of Safety and Security issued an AlertNU notification at 6:43 p.m. CDT urging the community to take 'precautionary measures' and 'await further direction.' University and Evanston police thoroughly searched the building, found no evidence of gunfire or injured persons, and issued an all-clear at 6:56 p.m. CDT, exactly 13 minutes after the first AlertNU went out. The report was determined to be unfounded.

Alerts
2
Response
23 min
Killed
0
Injured
0
Institution
Northwestern University
Private R1 · IL
All Northwestern cases →
~23,000 studentsAlertNU
Official alert policy
Read when and how Northwestern says it will use AlertNU: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

INITIAL ALERTMulti-channel
Emergency - Police activity Evanston campus - 2233 Tech Drive - Mudd Library. Take immediate precautionary measures and await further direction.
Verbatim text from the Northwestern University X/social post at 6:43 PM CDT as quoted by NBC Chicago; the alert specifies the exact address '2233 Tech Drive' where Mudd Library is located on the Evanston campus
Northwestern's choice to use the soft 'police activity' framing (rather than 'shots fired,' 'active shooter,' or 'shelter in place') reflects a deliberate de-escalation posture during an unverified report
The 23-minute gap between the 6:20 PM CDT EPD response and the 6:43 PM CDT AlertNU is consistent with Northwestern's verification-before-notification posture; the university had previously faced student criticism over alert timing in the April 2023 Clark Street Beach shooting, which prompted an institutional review
ALL CLEARTwitter/X+13 min
Emergency - Police activity Evanston campus - 2233 Tech Drive - Mudd Library. No further police activity - All Clear issued.
Verbatim full text from official @NorthwesternU X status 1964115447135039882.
Preserves double space after period and "No further police activity - All Clear issued." wording exactly.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

Emergency - Police activity Evanston campus - 2233 Tech Drive - Mudd Library. Take immediate precautionary measures and await further direction.

  • Sourceabsent6/25

    Final assessment

    Most reads find no sender; only "police activity" is referenced, with a minority treating police as a named responding authority.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. absent: No sender tag, agency, or university self-identification appears in the text, only "Police activity".
    2. absent: No sender or branded signature appears, only "Police" referenced as activity.
    3. present: It references "Police activity", a named responding authority.
    4. present: It names "Police activity", identifying the responding authority.
    5. absent: No sender tag, university name, or agency identifies who issued this message.
    6. present: It refers to "Police activity" as the responding authority on the Evanston campus.
    7. absent: No sender tag, agency, or university self-identification appears in the text.
    8. absent: No sender tag or named authority appears; it begins "Emergency - Police activity".
    9. absent: No sender tag, university name, or agency is identified, only "Police activity" generically.
    10. absent: No sender tag or issuing authority is named; "Police activity" is described but no agency signs it.
    11. absent: No sender tag or self-naming authority; "Police activity" is described but no issuer named.
    12. absent: No sender tag or issuing authority is named; "Police activity" describes the response, not the named issuer.
    13. present: It references "Police activity" by an authority and an emergency alert format, identifying a source.
    14. absent: No sender tag or named issuing authority appears, though it cites "Police activity".
    15. absent: No sender tag, university name, or named agency appears, only generic "Police activity".
    16. absent: No sender name or branded signature appears, only "Police activity" generically.
    17. absent: No sender, branded tag, or authority identifies itself; "Police activity" describes a situation, not the sender.
    18. absent: No branded signature, agency, or university self-naming appears; "Police activity" is described, not as sender.
    19. absent: No sender, agency, or branded signature appears; "Police activity" describes responders not a named sender tag.
    20. absent: No sender brand, university name, or named agency identifies who issued the message.
    21. present: Names "Police activity" by an authority and refers to an emergency, an issuing authority.
    22. absent: No sender tag, university name, or named agency appears; only generic "Police activity".
    23. present: It references "Police activity" and "Evanston campus", naming police and the campus as source.
    24. absent: No sender tag or named authority appears; "Police activity" describes the scene, not an issuer.
    25. absent: No sender tag, institution name, or agency identifies who issued this message, only "Police activity".
  • Hazardabsent0/25

    Final assessment

    All 25 reads agree no specific hazard is named; the alert says only "Emergency, Police activity" without stating the threat.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: It says "Emergency - Police activity" but never names a specific threat.
    2. absent: It names only "Police activity" and "Emergency", generic words without a specific hazard.
    3. absent: It only says "Police activity", naming no specific hazard.
    4. absent: It cites "Emergency" and "Police activity" but names no specific hazard.
    5. absent: It cites only "Police activity" and "Emergency" without naming a specific threat.
    6. absent: No specific hazard is named; "Police activity" and "Emergency" do not name the threat.
    7. absent: Says only "Police activity", naming no specific threat.
    8. absent: It states "Police activity" but names no specific threat in this text.
    9. absent: Says only "Police activity" with no specific hazard named.
    10. absent: No specific threat is named; "Emergency" and "Police activity" do not name a hazard.
    11. absent: "Emergency" and "Police activity" are generic and name no specific hazard.
    12. absent: It says "Police activity" and "Emergency", which are generic and do not name a specific hazard.
    13. absent: It says "Emergency" and "Police activity" but names no specific hazard.
    14. absent: No specific hazard is named; it cites only "Police activity", not the threat itself.
    15. absent: Refers only to "Police activity" and "Emergency", naming no specific hazard.
    16. absent: Only "Police activity" and "Emergency" are stated, with no specific hazard named.
    17. absent: No specific hazard is named, only "Police activity", which does not name a threat.
    18. absent: It says only "Emergency" and "Police activity", naming no specific hazard.
    19. absent: It says "Police activity" but names no specific hazard.
    20. absent: It cites only "Police activity", a generic phrase naming no specific hazard.
    21. absent: Only "Emergency" and "Police activity" appear, no specific hazard named.
    22. absent: Only "Police activity" and "Emergency" appear; no specific hazard type like shooter or bomb is named.
    23. absent: It cites generic "Emergency - Police activity"; no specific hazard is named.
    24. absent: No specific threat is named; "Emergency, Police activity" is generic.
    25. absent: It cites "Police activity" but names no specific hazard, only a generic emergency.
  • Locationpresent25/25

    Final assessment

    All reads agree a location is present, naming the Evanston campus, 2233 Tech Drive, and Mudd Library.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", a specific address and building.
    2. present: It names "Evanston campus", "2233 Tech Drive", "Mudd Library", specific places.
    3. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library".
    4. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    5. present: It names "Evanston campus", "2233 Tech Drive", and "Mudd Library".
    6. present: It names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    7. present: Names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    8. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    9. present: Names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    10. present: It names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    11. present: Names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    12. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    13. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    14. present: Specifies "Evanston campus - 2233 Tech Drive - Mudd Library", named places.
    15. present: Names "Evanston campus - 2233 Tech Drive - Mudd Library", specific locations.
    16. present: Names "Evanston campus - 2233 Tech Drive - Mudd Library", specific locations.
    17. present: Names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    18. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", a specific location.
    19. present: It names "Evanston campus", "2233 Tech Drive", "Mudd Library", specific places.
    20. present: It names "Evanston campus, 2233 Tech Drive, Mudd Library", specific locations.
    21. present: Names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    22. present: It names "Evanston campus", "2233 Tech Drive", and "Mudd Library", specific places.
    23. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
    24. present: Names "Evanston campus, 2233 Tech Drive, Mudd Library", specific locations.
    25. present: It names "Evanston campus - 2233 Tech Drive - Mudd Library", specific places.
  • Guidancepresent25/25

    Final assessment

    All 25 reads agree guidance is present; recipients are told to take immediate precautionary measures and await further direction.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
    2. present: It instructs "Take immediate precautionary measures and await further direction".
    3. present: It instructs recipients to "Take immediate precautionary measures and await further direction".
    4. present: It instructs "Take immediate precautionary measures and await further direction", protective actions.
    5. present: It instructs recipients to "Take immediate precautionary measures and await further direction".
    6. present: It instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
    7. present: Instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
    8. present: It tells recipients to "Take immediate precautionary measures and await further direction", protective actions.
    9. present: Instructs "Take immediate precautionary measures and await further direction", protective actions.
    10. present: It tells recipients to "Take immediate precautionary measures and await further direction", protective actions.
    11. present: Instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
    12. present: It tells recipients to "Take immediate precautionary measures and await further direction".
    13. present: It instructs "Take immediate precautionary measures and await further direction", protective actions.
    14. present: Instructs "Take immediate precautionary measures and await further direction", protective actions.
    15. present: Instructs recipients to "Take immediate precautionary measures and await further direction".
    16. present: Instructs recipients to "Take immediate precautionary measures and await further direction".
    17. present: Instructs recipients to "Take immediate precautionary measures and await further direction".
    18. present: It instructs people to "Take immediate precautionary measures and await further direction".
    19. present: It instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
    20. present: It tells recipients to "Take immediate precautionary measures and await further direction".
    21. present: Instructs recipients to "Take immediate precautionary measures and await further direction".
    22. present: It instructs "Take immediate precautionary measures and await further direction", protective actions.
    23. present: It instructs "Take immediate precautionary measures and await further direction", protective actions.
    24. present: Instructs recipients to "Take immediate precautionary measures and await further direction", a protective action.
    25. present: It instructs recipients to "Take immediate precautionary measures and await further direction", protective actions.
  • Timepresent25/25

    Final assessment

    All reads agree timing is present via the recency cue "immediate".

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: It says to take "immediate" measures, a recency cue.
    2. present: "immediate" conveys recency and urgency.
    3. present: The word "immediate" conveys urgency and recency.
    4. present: It says "immediate", a recency cue.
    5. present: It uses the recency cue "immediate".
    6. present: It says "immediate", conveying urgency and recency.
    7. present: Says to take "immediate" measures, a recency and urgency cue.
    8. present: It says to take "immediate" precautionary measures, a recency cue.
    9. present: Says "immediate", conveying urgency and recency.
    10. present: It says "immediate", a recency cue.
    11. present: Says "immediate", a recency cue.
    12. present: It says "immediate", a recency cue.
    13. present: It says "immediate", a recency cue.
    14. present: Says "immediate", a recency cue.
    15. present: Says "immediate", conveying urgency.
    16. present: Uses "immediate", a recency cue.
    17. present: Says to take "immediate" measures, a recency cue.
    18. present: It says "immediate", a recency cue.
    19. present: It says to take "immediate" measures, a recency cue.
    20. present: It says take "immediate" measures, a recency cue.
    21. present: Says to take "immediate" measures, a recency cue.
    22. present: It says "immediate", conveying urgency and recency.
    23. present: It says "immediate", a recency cue.
    24. present: Says "immediate", a recency cue.
    25. present: It says "immediate", a recency cue.
  • Impactabsent1/25

    Final assessment

    Absent by near-unanimous agreement (24 of 25). The alert cites police activity and tells people to take precautionary measures but names no hazard and states no potential harm.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: Police activity with precautionary measures states no hazard, consequence, or stated harm.
    2. absent: Reports police activity and says take precautionary measures but names no hazard or stated harm.
    3. absent: Reports police activity and tells people to take precautionary measures but states no harm or danger.
    4. absent: Reports police activity with precautionary measures but states no specific hazard or harm.
    5. absent: It cites police activity and to take precautionary measures but states no hazard or stated harm.
    6. absent: It cites police activity and tells people to take precautionary measures without stating any hazard or its potential harm.
    7. absent: Reports police activity and says take precautionary measures without stating any hazard or potential harm.
    8. absent: Police activity with precautionary measures but no stated hazard or consequence.
    9. present: Reports police activity and urges immediate precautionary measures, implying a danger requiring protection.
    10. absent: Police activity with take-precautionary-measures guidance states no specific harm or consequence.
    11. absent: It reports police activity and says take precautionary measures with no stated hazard or harm.
    12. absent: Reports police activity and to take precautionary measures but states no hazard name or harm.
    13. absent: Police activity with precautionary-measures guidance names no hazard or stated danger.
    14. absent: Reports police activity and directs precautionary measures but states no hazard or consequence.
    15. absent: It cites police activity and precautionary measures but names no hazard or stated danger.
    16. absent: References police activity with a take-precautionary-measures directive but states no specific hazard or harm.
    17. absent: Notes police activity and to take precautionary measures but states no danger or consequence.
    18. absent: It cites police activity and tells people to take precautions but states no specific harm or severity.
    19. absent: Police activity with precautionary measures gives no specific harm or named hazard severity.
    20. absent: Reports police activity and to take precautionary measures but states no explicit hazard or harm.
    21. absent: It reports police activity and tells people to take precautionary measures but names no hazard or harm.
    22. absent: It reports police activity and tells people to take precautionary measures but states no harm or severity.
    23. absent: Reports police activity and tells people to take precautionary measures but states no hazard or harm.
    24. absent: Reports police activity and tells people to take precautionary measures but states no specific harm.
    25. absent: Reports police activity with precautionary measures but states no specific harm or consequence.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Northwestern University is a private R1 doctoral institution in Evanston, Illinois with approximately 23,000 students. The Seeley G. Mudd Library is Northwestern's science and engineering library on the Evanston campus. On the evening of Friday, September 5, 2025, the Evanston Police Department responded to a call of shots fired in a bathroom inside Mudd Library at approximately 6:20 p.m. CDT. The Department of Safety and Security issued the first AlertNU notification 23 minutes later at 6:43 p.m. CDT, urging recipients to take 'precautionary measures' and 'await further direction.' University and Evanston police thoroughly searched the building. No evidence of gunfire was located, no victims were found, and no one inside or outside Mudd had heard or seen any disturbance or sounds of gunfire. A second AlertNU at 6:56 p.m. CDT reported that police activity had ceased and an all-clear was issued, 13 minutes after the first alert. Evanston Police cleared the scene by 6:58 p.m. CDT. The incident occurred during a broader 2025 wave of college campus active-shooter hoaxes that affected universities including Villanova, Tennessee, UVA, UMD, and many others. Northwestern's previous AlertNU history (including a late-arriving alert during the April 2023 Clark Street Beach shooting that prompted an institutional review) forms the background for the September 2025 alert decisions.
Analysis

Key Findings

Northwestern issued AlertNU 23 minutes after the 6:20 PM CDT EPD response, reflecting a verification-before-notification posture
The 13-minute interval from first alert (6:43 PM CDT on September 5, 2025) to all-clear (6:56 PM CDT) is among the fastest unfounded-report resolutions documented in this archive, driven by absence of any corroborating witnesses inside the building
The soft 'police activity' framing (rather than 'shots fired' or 'active shooter') reflects a cautious posture toward unverified reports; Northwestern had ordered a review of its alerting after the April 2023 Clark Street Beach shooting
September 5, 2025 fell within a documented nationwide wave of college campus swatting incidents; Northwestern's stop-short of explicitly labeling this 'swatting' in initial statements is notable, the university used 'unfounded' instead
Outcome
No evidence of gunfire was found. No victims were located. No one inside or outside Mudd Library had heard or seen any disturbance. The report was officially deemed 'unfounded.' Evanston Police cleared the scene by 6:58 p.m. CDT. The incident occurred during a broader 2025 wave of college campus active-shooter hoaxes, though Northwestern police did not explicitly classify the report as swatting in their initial public statement.
Provenance

Sources

  1. Student Paper
  2. News
  3. Source
  4. News
  5. Official
  6. Social
Cite this case

Campus Alert Archive. "Northwestern University: Report of shots fired in a library bathroom determined to be unfounded." Incident of September 5, 2025. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/northwestern-mudd-library-unfounded-shots-fired-2025-09-05/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingunfoundedlibraryillinoisprivate-r1northwesternevanstonalertnumudd-librarybig-tenno-injuriessoft-framingUnfounded
Added May 2026Updated July 2026Via ingestion