Campus Alert Archive
Northwestern

Bullet casings found after a shots-fired report; 49-minute campus lockdown

AI-generated · every claim is source-linked
ILshootingemergency notificationhigh confidence
Compare →
Under Investigation

Northwestern issued an "Active Threat" AlertNU at 10:53 p.m. CST on a Sunday evening after reports of shots fired near the Bienen School of Music on Arts Circle Drive. Police found bullet casings but no victims, and the all-clear was issued at 11:42 p.m. CST after a 49-minute campus lockdown.

Alerts
3
Response
—
Killed
—
Injured
—
Institution
Northwestern University
Private R1 · IL
All Northwestern cases →
~22,601 studentsAlertNU
Official alert policy
Read when and how Northwestern says it will use AlertNU: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

3 messages in sequence · 3 verified verbatim

INITIAL ALERTTwitter/X
Verified verbatim@NorthwesternU on X (verbatim)160 chars
AlertNU: There is an Active Threat event on the Evanston Campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.
Verbatim text confirmed from the @NorthwesternU X/Twitter post (status 1761977610198782435) on February 25, 2024
Sent at 10:53 p.m. CST on February 25, 2024, the alert used the 'Run, Hide, Fight' framework that has become standard for active threat notifications at U.S. universities
The use of 'Active Threat' rather than 'Active Shooter' leaves open the possibility of various threat types while still conveying maximum urgency
UPDATETwitter/X+14 min
Verified verbatim@NorthwesternU on X (verbatim raw t.co)171 chars
Northwestern Police are on scene investigating reports of shots fired near 70 Arts Circle Dr on the Evanston campus. Visit http://northwestern.edu/emergency for updates.
Sent 14 minutes after the initial alert at 11:07 p.m. CST on February 25, 2024, this update specified the location near the Bienen School of Music at 70 Arts Circle Drive
The shift from 'Run, Hide, Fight' to 'Shelter in place' indicates police had established a perimeter and determined the situation was more contained
ALL CLEARTwitter/X+52 min
Verified verbatim@NorthwesternU on X (verbatim raw t.co)213 chars
All clear issued following report of shots fired near 70 Arts Circle Dr in Evanston. No injured person located. Police remain on scene investigating. Continue to avoid the area. http://northwestern.edu/emergency
Verbatim text from the @NorthwesternU X/Twitter all-clear post on February 25, 2024
Issued at 11:42 p.m. CST on February 25, 2024, ending a 49-minute lockdown from the initial active threat alert
Bullet casings were later recovered from the scene, validating the initial alert, though no victims or suspects were located
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

AlertNU: There is an Active Threat event on the Evanston Campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the source is present; the branded AlertNU signature identifies Northwestern as sender.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Opens with branded signature "AlertNU", identifying the sender.
    2. present: It opens "AlertNU", a branded sender tag for Northwestern.
    3. present: Branded "AlertNU" signature identifies Northwestern as the sender.
    4. present: The branded signature "AlertNU" identifies Northwestern University as sender.
    5. present: Opens with branded signature "AlertNU", identifying the sender.
    6. present: It opens with "AlertNU", a branded signature identifying the sender.
    7. present: The branded "AlertNU" signature identifies the Northwestern sender.
    8. present: Opens with the branded signature "AlertNU", identifying the sender.
    9. present: Branded "AlertNU" signature identifies the sender.
    10. present: It opens with the branded "AlertNU" signature identifying the sender.
    11. present: The branded signature "AlertNU" identifies the university sender.
    12. present: Branded signature "AlertNU" identifies the sender.
    13. present: Opens with branded tag "AlertNU", identifying the sender.
    14. present: The branded signature "AlertNU" identifies the sender.
    15. present: The branded signature "AlertNU" identifies the sending alert system.
    16. present: Opens with the branded signature "AlertNU".
    17. present: The "AlertNU" signature identifies Northwestern University as sender.
    18. present: It opens with the branded signature "AlertNU", identifying the sender.
    19. present: It opens with the branded signature "AlertNU", identifying the sender.
    20. present: It opens with the branded signature "AlertNU", identifying the sender.
    21. present: Opens with the branded signature "AlertNU", identifying the sender.
    22. present: Opens with branded signature "AlertNU", identifying the sender.
    23. present: The branded "AlertNU" tag identifies the sender.
    24. present: The branded "AlertNU" tag identifies the sender.
    25. present: The branded "AlertNU" signature identifies the Northwestern sender.
  • Hazardpresent14/25

    Final assessment

    Reads split closely; a bare majority treats active threat event paired with run hide fight as the named hazard while the rest call it too generic.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: Says only "an Active Threat event", which is generic and names no specific hazard.
    2. present: It names "an Active Threat event", a specific threat.
    3. absent: Says "Active Threat event", generic wording that names no specific hazard.
    4. absent: It states only "an Active Threat event", which does not name a specific hazard.
    5. absent: Says "an Active Threat event", which is generic and does not name a specific hazard.
    6. present: It names "an Active Threat event", which here functions as the named hazard.
    7. present: It states "an Active Threat event", paired with run-hide-fight; though generic, it signals an attacker threat.
    8. present: States "an Active Threat event", though generic; combined with "Run, Hide, Fight" it implies an armed threat, coded present.
    9. absent: States "an Active Threat event" generically, naming no specific hazard.
    10. present: It names "an Active Threat event", a specific threat.
    11. present: It names "an Active Threat event", stated as the specific situation.
    12. present: Names "an Active Threat event", treated as a specific threat here.
    13. absent: Says "Active Threat event"; "threat" is generic and names no specific hazard.
    14. present: It names "an Active Threat event", and instructs Run-Hide-Fight, specifying a violent threat.
    15. present: It names "an Active Threat event", and the run-hide-fight context indicates an armed threat.
    16. absent: Says "an Active Threat event" without naming a specific hazard.
    17. present: It names "an Active Threat event", which functions as the stated threat.
    18. present: It names "an Active Threat event", which here functions as the specific hazard.
    19. absent: It says "Active Threat event" but does not name the specific hazard.
    20. present: It states "an Active Threat event", and instructs Run-Hide-Fight, naming an active-threat hazard.
    21. present: States "an Active Threat event", which the rubric counts as a hazard.
    22. absent: Says only "an Active Threat event", a generic phrase naming no specific hazard.
    23. present: It names "an Active Threat event", and run-hide-fight implies an attacker, a specific threat.
    24. absent: It says only "an Active Threat event", which does not name a specific hazard.
    25. absent: It cites only "an Active Threat event", which does not name a specific hazard.
  • Locationpresent25/25

    Final assessment

    All 25 reads agree a location is given, the Evanston Campus.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Locates it "on the Evanston Campus".
    2. present: It says "on the Evanston Campus", a specific place.
    3. present: Specifies "the Evanston Campus", a place.
    4. present: It says "on the Evanston Campus", a specific place.
    5. present: Says "on the Evanston Campus", referencing the campus.
    6. present: It says "on the Evanston Campus", a specific place.
    7. present: It specifies "the Evanston Campus", a location.
    8. present: Says "on the Evanston Campus", a specific place.
    9. present: Locates it "on the Evanston Campus".
    10. present: It says "on the Evanston Campus", a specific place.
    11. present: It locates it "on the Evanston Campus".
    12. present: Locates it "on the Evanston Campus".
    13. present: Says "on the Evanston Campus", a specific location.
    14. present: It locates it on "the Evanston Campus".
    15. present: It locates it on "the Evanston Campus", a specific campus.
    16. present: Says it is "on the Evanston Campus", a specific location.
    17. present: It locates it "on the Evanston Campus", a named campus.
    18. present: It locates it "on the Evanston Campus".
    19. present: It locates it on "the Evanston Campus".
    20. present: It locates it "on the Evanston Campus", a campus location.
    21. present: Says it is "on the Evanston Campus", a specific place.
    22. present: Specifies "the Evanston Campus".
    23. present: It locates it "on the Evanston Campus".
    24. present: It says "on the Evanston Campus", a named place.
    25. present: It locates it "on the Evanston Campus".
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is present; recipients are told run hide fight and to lock or barricade doors.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    2. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    3. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    4. present: It instructs "Run, Hide, Fight" and to "Lock and/or barricade doors", protective actions.
    5. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    6. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    7. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    8. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors", protective actions.
    9. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    10. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    11. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    12. present: Instructs recipients: "Run, Hide, Fight" and "Lock and/or barricade doors".
    13. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    14. present: It instructs "Run, Hide, Fight" and to "Lock and/or barricade doors".
    15. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    16. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    17. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    18. present: It instructs recipients "Run, Hide, Fight" and "Lock and/or barricade doors".
    19. present: It instructs "Run, Hide, Fight... Lock and/or barricade doors".
    20. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    21. present: Instructs "Run, Hide, Fight", "Lock and/or barricade doors", protective actions.
    22. present: Instructs "Run, Hide, Fight", "Take proper shelter", "Lock and/or barricade doors".
    23. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    24. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    25. present: It instructs recipients "Run, Hide, Fight", "Lock and/or barricade doors".
  • Timeabsent0/25

    Final assessment

    All 25 reads agree time is absent; no clock time, date, or recency cue appears.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears in the text.
    2. absent: No clock time, date, or recency word like "now" appears.
    3. absent: No clock time, date, or recency cue such as "now" appears.
    4. absent: No clock time, date, or recency cue is present in the text.
    5. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    6. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    7. absent: No clock time, date, or recency cue such as "now" appears in the text.
    8. absent: No clock time, date, or recency word such as "now" appears in the text.
    9. absent: No clock time, date, or recency cue appears.
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears in the text.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency word appears in the text.
    14. absent: No clock time, date, or recency word such as "now" appears.
    15. absent: No clock time, date, or recency cue such as "now" appears in the text.
    16. absent: No clock time, date, or recency cue appears in the text.
    17. absent: No clock time, date, or recency cue such as "now" appears in the text.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    20. absent: No clock time, date, or recency cue such as "now" appears in the text.
    21. absent: No clock time, date, or recency word like "now" appears in the text.
    22. absent: No clock time, date, or recency cue appears in the text.
    23. absent: No clock time, date, or recency cue appears in the text.
    24. absent: No clock time, date, or recency cue appears in the text.
    25. absent: No clock time, date, or recency word appears in the text.
  • Impactpresent25/25

    Final assessment

    Present by unanimous agreement. An active threat with Run, Hide, Fight and barricade-doors instructions conveys an imminent, life-threatening danger to people.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: An active threat with run-hide-fight and barricade-doors instructions conveys a clear danger to people.
    2. present: States an active threat and instructs run hide fight including fight, conveying lethal danger to people.
    3. present: Declares an active threat with run-hide-fight and to barricade doors, implying lethal danger to people.
    4. present: An active threat with run-hide-fight and barricade doors conveys an imminent violent threat to people.
    5. present: It declares an active threat with Run Hide Fight and to barricade doors, conveying imminent danger to life.
    6. present: An active threat event with Run Hide Fight and instructions to barricade doors implies a serious danger to people.
    7. present: Reports an active threat with Run Hide Fight guidance, conveying clear life-threatening danger.
    8. present: Active threat with Run Hide Fight and barricade doors conveys life-threatening danger.
    9. present: Declares an active threat and run hide fight, conveying a danger to life requiring fighting as defense.
    10. present: An active threat with run-hide-fight and barricade-doors instructions conveys an imminent deadly threat to people.
    11. present: It declares an active threat and instructs run-hide-fight with barricading, strongly implying lethal danger.
    12. present: Reports an active threat with Run Hide Fight and barricade instructions, conveying a clear lethal danger.
    13. present: The Run-Hide-Fight active-threat framing with barricading conveys a life-threatening danger.
    14. present: Reports an active threat with run-hide-fight and barricade instructions, conveying serious danger to people.
    15. present: It reports an active threat with Run Hide Fight and barricade instructions, conveying a deadly danger to people.
    16. present: Declares an active threat with Run-Hide-Fight and barricade directives, conveying a lethal threat to people.
    17. present: Reports an active threat with Run Hide Fight and to barricade doors, conveying a clear threat to life.
    18. present: It declares an active threat and instructs run hide fight and barricade doors, conveying lethal danger.
    19. present: An active threat with Run Hide Fight and barricade-doors conveys the lethal danger to people.
    20. present: Declares an active threat with run-hide-fight and barricade, conveying lethal danger.
    21. present: An active threat with Run Hide Fight and barricade instructions conveys a serious danger to people.
    22. present: An active threat with Run Hide Fight and barricade instructions conveys a life-threatening danger to people.
    23. present: Names an active threat with run-hide-fight guidance, which conveys a danger to life.
    24. present: Reports an active threat with Run Hide Fight, conveying lethal danger to people.
    25. present: Reports an active threat with Run Hide Fight and barricade instructions, implying lethal danger.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On the evening of Sunday, February 25, 2024, reports of shots fired near the Bienen School of Music on Northwestern's Evanston campus triggered an active threat alert that locked down the campus for nearly 50 minutes. The incident occurred along Arts Circle Drive, near the lakefront area of the Evanston campus. Both Northwestern University Police and Evanston Police responded to the scene and found bullet casings but no injured person or suspect. In a Monday morning email to the community, Chief of Police Bruce Lewis confirmed that no suspect was in custody but the investigation was continuing. The incident came less than a year after a fatal shooting on Clark Street Beach in April 2023 that killed a man and wounded two teenagers, prompting a previous shelter-in-place order. Students expressed frustration that gun violence continued to reach the campus perimeter. The proximity of the lakefront to campus buildings has been a recurring security concern for Northwestern.
Analysis

Key Findings

The 49-minute lockdown from initial alert to all-clear was relatively fast for an active threat response, reflecting rapid police deployment
The 'Run, Hide, Fight' language in the initial alert represents the current best practice for active threat notifications, giving students actionable options
Bullet casings confirmed actual gunfire occurred, distinguishing this from a false alarm, though no victims or suspects were found
This was the second major shooting-related shelter-in-place at Northwestern in under a year, following the April 2023 Clark Street Beach shooting
Outcome
No injuries were reported. Bullet casings were recovered from the scene. No suspect was taken into custody, and the investigation continued.
Provenance

Sources

  1. Social
    @NorthwesternU AlertNU chain (X)
    x.com
    archived copy
  2. Social
    @NorthwesternU AlertNU chain (X)
    x.com
    archived copy
  3. Student Paper
    Northwestern issues all clear message for shooting threat on Evanston campus - Daily Northwestern
    dailynorthwestern.com
    archived copy
  4. News
    Northwestern shooting: NU police investigate report of shots fired - ABC7 Chicago
    abc7chicago.com
    archived copy
  5. News
    Police find bullet casings on NU campus after shots fired report - Evanston RoundTable
    evanstonroundtable.com
    archived copy
  6. News
    Northwestern University community shaken after shots fired Sunday - Chicago Sun-Times
    chicago.suntimes.com
    archived copy
  7. Social
    @NorthwesternU on X (verbatim)
    x.com
    archived copy
Cite this case

Campus Alert Archive. "Northwestern University: Bullet casings found after a shots-fired report; 49-minute campus lockdown." Incident of February 25, 2024. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/northwestern-university-shooting-threat-2024-02-25/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
shootingactive-threatshelter-in-placebullet-casingsevanstonelite-privateillinoislakefrontUnder Investigation
Added May 2026Updated July 2026Via ingestion