Skip to content
Campus Alert Archive
Northwestern

Single gunshot outside a campus building after a fight; lockdown lifted in 36 minutes

AI-generated · every claim is source-linked
ILshootingemergency notificationmedium confidence
Confirmed Threat

At 8:55 p.m. CST on November 27, 2023, Northwestern University Police became aware that one shot had been fired outside Wieboldt Hall on the Chicago campus after a fight in the 300 block of East Chicago Avenue. An AlertNU 'active threat event' push followed within four minutes at 8:59 p.m. CST, and an all-clear was issued at 9:35 p.m. CST after the lone armed individual fled and Chicago Police determined there was no active shooter.

Alerts
2
Response
4 min
Killed
0
Injured
0
Institution
Northwestern University
Private R1 · IL
All Northwestern cases →
~23,000 studentsAlertNU
Official alert policy
Read when and how Northwestern says it will use AlertNU: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

2 messages in sequence · 1 verified verbatim

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTSMS
AlertNU: There is an Active Threat event on the Chicago campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.
Pushed at 8:59 p.m. CST, four minutes after Northwestern Police became aware of the report at 8:55 p.m. CST, an unusually fast notification cycle
'Run, Hide, Fight' is the federally promoted active-shooter response framework adopted by AlertNU as the standard imperative for an active threat
The Daily Northwestern, CBS Chicago, and Block Club Chicago each quoted the four-sentence imperative ('Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.') verbatim
Calling it an 'Active Threat event' rather than 'Active Shooter' preserved accuracy: only one shot had been fired and the situation was rapidly evolving
The verbatim text matches the AlertNU template structurally identical to Northwestern's February 25, 2024 active threat alert at the Bienen School of Music
ALL CLEARSMS+36 min
Wording not preserved
A all clear message is documented at this point in the sequence, but its exact wording is not preserved in the public record. The public edition displays only confirmed alert text.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

AlertNU: There is an Active Threat event on the Chicago campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the source is present; the branded AlertNU tag identifies Northwestern as sender.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Opens with branded signature "AlertNU", identifying the sender.
    2. present: It opens "AlertNU", a branded sender tag for Northwestern.
    3. present: Branded "AlertNU" signature identifies Northwestern as the sender.
    4. present: The branded signature "AlertNU" identifies Northwestern University as sender.
    5. present: Opens with branded signature "AlertNU", identifying the sender.
    6. present: It opens with "AlertNU", a branded signature identifying the sender.
    7. present: The branded "AlertNU" signature identifies the Northwestern sender.
    8. present: Opens with the branded signature "AlertNU", identifying the sender.
    9. present: Branded "AlertNU" signature identifies the sender.
    10. present: It opens with the branded "AlertNU" signature identifying the sender.
    11. present: The branded signature "AlertNU" identifies the university sender.
    12. present: Branded signature "AlertNU" identifies the sender.
    13. present: Opens with branded tag "AlertNU", identifying the sender.
    14. present: The branded signature "AlertNU" identifies the sender.
    15. present: The branded signature "AlertNU" identifies the sending alert system.
    16. present: Opens with the branded signature "AlertNU".
    17. present: The "AlertNU" signature identifies Northwestern University as sender.
    18. present: It opens with the branded signature "AlertNU", identifying the sender.
    19. present: It opens with the branded signature "AlertNU", identifying the sender.
    20. present: It opens with the branded signature "AlertNU", identifying the sender.
    21. present: Opens with the branded signature "AlertNU", identifying the sender.
    22. present: Opens with branded signature "AlertNU", identifying the sender.
    23. present: The branded "AlertNU" tag identifies the sender.
    24. present: The branded "AlertNU" tag identifies the sender.
    25. present: The branded "AlertNU" signature identifies the Northwestern sender.
  • Hazardpresent14/25

    Final assessment

    Final call present; a majority read Active Threat event paired with Run, Hide, Fight as signaling an attacker, though a sizable minority found the phrase too generic.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: Says only "an Active Threat event", which is generic and names no specific hazard.
    2. present: It names "an Active Threat event", a specific threat.
    3. absent: Says "Active Threat event", generic wording that names no specific hazard.
    4. absent: It states only "an Active Threat event", which does not name a specific hazard.
    5. absent: Says "an Active Threat event", which is generic and does not name a specific hazard.
    6. present: It names "an Active Threat event", which here functions as the named hazard.
    7. present: It states "an Active Threat event", paired with run-hide-fight, signaling an attacker threat.
    8. present: States "an Active Threat event" with "Run, Hide, Fight", implying an armed threat, coded present.
    9. absent: States "an Active Threat event" generically, naming no specific hazard.
    10. present: It names "an Active Threat event", a specific threat.
    11. present: It names "an Active Threat event", stated as the specific situation.
    12. present: Names "an Active Threat event", treated as a specific threat here.
    13. absent: Says "Active Threat event"; "threat" is generic and names no specific hazard.
    14. present: It names "an Active Threat event" with Run-Hide-Fight, specifying a violent threat.
    15. present: It names "an Active Threat event", and the run-hide-fight context indicates an armed threat.
    16. absent: Says "an Active Threat event" without naming a specific hazard.
    17. present: It names "an Active Threat event", which functions as the stated threat.
    18. present: It names "an Active Threat event", which here functions as the specific hazard.
    19. absent: It says "Active Threat event" but does not name the specific hazard.
    20. present: It states "an Active Threat event" and Run-Hide-Fight, naming an active-threat hazard.
    21. present: States "an Active Threat event", which the rubric counts as a hazard.
    22. absent: Says only "an Active Threat event", a generic phrase naming no specific hazard.
    23. present: It names "an Active Threat event", and run-hide-fight implies an attacker, a specific threat.
    24. absent: It says only "an Active Threat event", which does not name a specific hazard.
    25. absent: It cites only "an Active Threat event", which does not name a specific hazard.
  • Locationpresent25/25

    Final assessment

    All reads agree a location is present, citing the Chicago campus.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Locates it "on the Chicago campus".
    2. present: It says "on the Chicago campus", a specific place.
    3. present: Specifies "the Chicago campus", a place.
    4. present: It says "on the Chicago campus", a specific place.
    5. present: Says "on the Chicago campus", referencing the campus.
    6. present: It says "on the Chicago campus", a specific place.
    7. present: It specifies "the Chicago campus", a location.
    8. present: Says "on the Chicago campus", a specific place.
    9. present: Locates it "on the Chicago campus".
    10. present: It says "on the Chicago campus", a specific place.
    11. present: It locates it "on the Chicago campus".
    12. present: Locates it "on the Chicago campus".
    13. present: Says "on the Chicago campus", a specific location.
    14. present: It locates it on "the Chicago campus".
    15. present: It locates it on "the Chicago campus", a specific campus.
    16. present: Says it is "on the Chicago campus", a specific location.
    17. present: It locates it "on the Chicago campus", a named campus.
    18. present: It locates it "on the Chicago campus".
    19. present: It locates it on "the Chicago campus".
    20. present: It locates it "on the Chicago campus", a campus location.
    21. present: Says it is "on the Chicago campus", a specific place.
    22. present: Specifies "the Chicago campus".
    23. present: It locates it "on the Chicago campus".
    24. present: It says "on the Chicago campus", a named place.
    25. present: It locates it "on the Chicago campus".
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is present, instructing Run, Hide, Fight and to lock or barricade doors.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    2. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    3. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    4. present: It instructs "Run, Hide, Fight" and to "Lock and/or barricade doors", protective actions.
    5. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    6. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    7. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    8. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors", protective actions.
    9. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    10. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    11. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors".
    12. present: Instructs recipients: "Run, Hide, Fight" and "Lock and/or barricade doors".
    13. present: Instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    14. present: It instructs "Run, Hide, Fight" and to "Lock and/or barricade doors".
    15. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    16. present: Instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    17. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    18. present: It instructs recipients "Run, Hide, Fight" and "Lock and/or barricade doors".
    19. present: It instructs "Run, Hide, Fight... Lock and/or barricade doors".
    20. present: It instructs "Run, Hide, Fight" and "Lock and/or barricade doors", protective actions.
    21. present: Instructs "Run, Hide, Fight", "Lock and/or barricade doors", protective actions.
    22. present: Instructs "Run, Hide, Fight", "Take proper shelter", "Lock and/or barricade doors".
    23. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    24. present: It instructs "Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors".
    25. present: It instructs recipients "Run, Hide, Fight", "Lock and/or barricade doors".
  • Timeabsent0/25

    Final assessment

    All 25 reads agree timing is absent; no clock time, date, or recency cue appears.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears in the text.
    2. absent: No clock time, date, or recency word like "now" appears.
    3. absent: No clock time, date, or recency cue such as "now" appears.
    4. absent: No clock time, date, or recency cue is present in the text.
    5. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    6. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    7. absent: No clock time, date, or recency cue such as "now" appears in the text.
    8. absent: No clock time, date, or recency word such as "now" appears in the text.
    9. absent: No clock time, date, or recency cue appears.
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears in the text.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency word appears in the text.
    14. absent: No clock time, date, or recency word such as "now" appears.
    15. absent: No clock time, date, or recency cue such as "now" appears in the text.
    16. absent: No clock time, date, or recency cue appears in the text.
    17. absent: No clock time, date, or recency cue such as "now" appears in the text.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    20. absent: No clock time, date, or recency cue such as "now" appears in the text.
    21. absent: No clock time, date, or recency word like "now" appears in the text.
    22. absent: No clock time, date, or recency cue appears in the text.
    23. absent: No clock time, date, or recency cue appears in the text.
    24. absent: No clock time, date, or recency cue appears in the text.
    25. absent: No clock time, date, or recency word appears in the text.
  • Impactpresent25/25

    Final assessment

    Present by unanimous agreement. An active threat with Run, Hide, Fight and barricade-doors instructions conveys an imminent, life-threatening danger to people.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: An active threat with run-hide-fight and barricade-doors instructions conveys a clear danger to people.
    2. present: States an active threat and instructs run hide fight including fight, conveying lethal danger to people.
    3. present: Declares an active threat with run-hide-fight and to barricade doors, implying lethal danger to people.
    4. present: An active threat with run-hide-fight and barricade doors conveys an imminent violent threat to people.
    5. present: It declares an active threat with Run Hide Fight and to barricade doors, conveying imminent danger to life.
    6. present: An active threat event with Run Hide Fight and instructions to barricade doors implies a serious danger to people.
    7. present: Reports an active threat with Run Hide Fight guidance, conveying clear life-threatening danger.
    8. present: Active threat with Run Hide Fight and barricade doors conveys life-threatening danger.
    9. present: Declares an active threat and run hide fight, conveying a danger to life requiring fighting as defense.
    10. present: An active threat with run-hide-fight and barricade-doors instructions conveys an imminent deadly threat to people.
    11. present: It declares an active threat and instructs run-hide-fight with barricading, strongly implying lethal danger.
    12. present: Reports an active threat with Run Hide Fight and barricade instructions, conveying a clear lethal danger.
    13. present: The Run-Hide-Fight active-threat framing with barricading conveys a life-threatening danger.
    14. present: Reports an active threat with run-hide-fight and barricade instructions, conveying serious danger to people.
    15. present: It reports an active threat with Run Hide Fight and barricade instructions, conveying a deadly danger to people.
    16. present: Declares an active threat with Run-Hide-Fight and barricade directives, conveying a lethal threat to people.
    17. present: Reports an active threat with Run Hide Fight and to barricade doors, conveying a clear threat to life.
    18. present: It declares an active threat and instructs run hide fight and barricade doors, conveying lethal danger.
    19. present: An active threat with Run Hide Fight and barricade-doors conveys the lethal danger to people.
    20. present: Declares an active threat with run-hide-fight and barricade, conveying lethal danger.
    21. present: An active threat with Run Hide Fight and barricade instructions conveys a serious danger to people.
    22. present: An active threat with Run Hide Fight and barricade instructions conveys a life-threatening danger to people.
    23. present: Names an active threat with run-hide-fight guidance, which conveys a danger to life.
    24. present: Reports an active threat with Run Hide Fight, conveying lethal danger to people.
    25. present: Reports an active threat with Run Hide Fight and barricade instructions, implying lethal danger.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Northwestern University operates a Chicago campus in Streeterville anchored by the medical, law, and journalism schools. Just before 9 p.m. CST on Monday, November 27, 2023, a fight broke out in the 300 block of East Chicago Avenue between Fairbanks Court and Inner Lake Shore Drive, directly outside Wieboldt Hall on Northwestern's law school complex. A woman in the group pulled a weapon and fired one shot; the crowd fled with no injuries reported. Northwestern Police became aware of the report at 8:55 p.m. CST and pushed an AlertNU 'active threat event' notification at 8:59 p.m. CST, a four-minute notification cycle. Chicago Police arrived to find no active shooter, confirming that the situation had been a single-shot dispute rather than a sustained attack. The all-clear came at 9:35 p.m. CST, 36 minutes after the initial AlertNU push. Suspects were later taken into custody by CPD. The alert was pushed before the underlying nature of the incident was fully understood.
Analysis

Key Findings

Northwestern pushed the AlertNU 'active threat' SMS within four minutes of becoming aware of the report (8:55 to 8:59 p.m. CST)
The 36-minute lockdown (8:59 p.m. CST to 9:35 p.m. CST) reflected Chicago Police's rapid determination that no sustained shooter was present
Naming Wieboldt Hall specifically gave shelter-takers actionable geographic information rather than a generic 'Chicago campus' boundary
'Active Threat event' rather than 'Active Shooter' preserved accuracy when only one shot had been confirmed
The four-minute notification cycle is documented in the Daily Northwestern's contemporaneous live coverage
Outcome
No injuries reported. The crowd dispersed before officers arrived. Suspects were later taken into custody. Northwestern lifted the lockdown 36 minutes after the initial alert.
Provenance

Sources

  1. Student Paper
  2. News
  3. News
  4. News
  5. News
  6. News
  7. Official
Cite this case

Campus Alert Archive. "Northwestern University: Single gunshot outside a campus building after a fight; lockdown lifted in 36 minutes." Incident of November 27, 2023. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/northwestern-wieboldt-hall-active-threat-2023-11-27/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
shootingactive-threatemergency-notificationnorthwesternillinoischicagostreetervilleprivate-r1wieboldt-halllaw-school-campusrun-hide-fightfast-response
Added May 2026Updated July 2026Via ingestion