Campus Alert Archive
SUU

False active-shooter call prompts a four-hour search of about 20 buildings

AI-generated · every claim is source-linked
UTswattingemergency notificationhigh confidence
Compare →
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

A suspicious phone call reporting an active shooter on the Southern Utah University campus triggered a full lockdown at approximately 9:20 AM MDT on April 11, 2024. SUU Police and Cedar City Police searched approximately 20 buildings over four hours before issuing an all-clear at 1:10 PM MDT. No shots were fired and the incident was determined to be a likely swatting hoax. The FBI was called in to investigate.

Alerts
5
Response
—
Killed
—
Injured
—
Institution
Southern Utah University
Public Masters · UT
All SUU cases →
~15,000 studentsSUU Alert
Documented Timeline

Alert Sequence

5 messages in sequence · 5 verified verbatim

INITIAL ALERTSMS
Verified verbatimGephardt Daily quoting the 9:23 a.m. SUU Alert verbatim239 chars
There has been an unconfirmed report of an active shooter on the SUU campus in Cedar City. No further details are available at this time. Please be alert and notify authorities of any suspicious activity. Local law enforcement is en route.
Sent at 9:23 a.m. MDT on April 11, 2024, three minutes after the suspicious phone call to dispatch at approximately 9:20 a.m. MDT
The alert used 'unconfirmed report' language rather than asserting an active shooter was present, reflecting the lack of verification of the caller's claims
The phrase 'be alert and notify authorities of any suspicious activity' directs the community to act as informants while law enforcement responds
UPDATESMS+10 min
Verified verbatimGephardt Daily quoting the 9:33 a.m. SUU Alert verbatim353 chars
We have a suspicious phone call regarding the possibility of an active shooter on the SUU Campus in Cedar City, Utah. All SUU Facilities are to be on lockdown. Police are on the scene and investigating. A suspect is NOT in custody. If you are campus follow lockdown procedures, go into the nearest room and lock door, if you are not on campus stay away.
Sent at 9:33 a.m. MDT, ten minutes after the first alert, formalizing the campus-wide lockdown
Typo 'If you are campus' (missing 'on') is preserved verbatim from the official alert
The explicit 'A suspect is NOT in custody' line is unusual, it preempts the public assumption that a heavy police presence means the situation is contained
UPDATESMS+29 min
Verified verbatimGephardt Daily quoting the 9:52 a.m. SUU Alert verbatim275 chars
We received a suspicious phone call regarding the possibility of an active shooter on the SUU Campus in Cedar City, Utah. Please be aware of a suspect fitting the description of a white male with black hat, black shades, green t-shirt, long hair, blue jeans, 20-25 years old.
Sent at 9:52 a.m. MDT on April 11, 2024, providing a detailed suspect description sourced from the swatting caller
The granular suspect description originated with the unverified caller's claims rather than any confirmed sighting
No person matching the description was located; the call was later determined to be a likely swatting hoax
UPDATESMS+43 min
Verified verbatimGephardt Daily quoting the 10:06 a.m. SUU Alert verbatim338 chars
We received reports of hearing noises that sounded like shots fired at the Science Building at Southern Utah University. All SUU Facilities are on lockdown. If you are on campus, follow lockdown procedures, by going into the nearest room and locking the door. If you are not on campus stay away. Police are on the scene and investigating.
Sent at 10:06 a.m. MDT, this update reported secondary 'sounded like shots fired' noises near the Science Building, later determined not to be gunfire
Secondary noise reports entered the alert stream during the lockdown before they could be verified
Law enforcement quickly determined no shots had actually been fired
ALL CLEARSMS+3h 47m
Verified verbatimSt. George News quoting the 1:10 PM MDT SUU Alert text verbatim, with headline 'Safe to exit: Lockdown lifted at SUU, campus being cleared by police'196 chars
All remaining buildings at SUU – have been searched and cleared by law enforcement. It is now safe to exit all remaining buildings and clear the area, while following law enforcement instructions.
Sent at 1:10 PM MDT on April 11, 2024, approximately three hours and 47 minutes after the initial 9:23 AM MDT alert
The all-clear notably omits the word 'hoax', the institution confirmed the swatting nature of the call in a separate news release rather than in the alert itself, keeping alert language operationally neutral
The phrase 'safe to exit all remaining buildings' implies a staged building-by-building clearance process rather than a simultaneous campus-wide release
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

There has been an unconfirmed report of an active shooter on the SUU campus in Cedar City. No further details are available at this time. Please be alert and notify authorities of any suspicious activity. Local law enforcement is en route.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the sender is present: the alert names the "SUU campus" and "Local law enforcement".

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Names "Local law enforcement" as responding authority and references the SUU campus as issuer.
    2. present: It names "SUU" and "Local law enforcement", identifying the issuing authority.
    3. present: Names "SUU campus" and "Local law enforcement", identifying the issuing institution and responding authority.
    4. present: The text names "Local law enforcement" and references "the SUU campus", identifying responding authority and issuer.
    5. present: Names "local law enforcement" and references the "SUU campus", identifying responding authority and issuing context.
    6. present: It names "Local law enforcement" and references the SUU campus authority, identifying responding sources.
    7. present: It names "Local law enforcement" and refers to "the SUU campus", identifying responding authority and issuing institution.
    8. present: Names the responding authority "Local law enforcement" and references "SUU campus", identifying who is involved.
    9. present: Names "Local law enforcement" and references "the SUU campus", identifying a responding authority.
    10. present: It names "Local law enforcement" and the "SUU campus" context, identifying responding authority.
    11. present: It names "Local law enforcement" and refers to "authorities", identifying a responding authority.
    12. present: Names "Local law enforcement" and refers to "the SUU campus", identifying responding authority and issuing institution.
    13. present: Names "Local law enforcement" and refers to "SUU campus", identifying responding authority and issuer.
    14. present: The text names "local law enforcement" and references the "SUU campus" as the affected institution, identifying responding authority.
    15. present: The text names "local law enforcement" and references "the SUU campus" and "authorities", identifying responding authority.
    16. present: Names "Local law enforcement" and references "the SUU campus" as the sending context, identifying responding authority.
    17. present: It identifies "Local law enforcement" and references the "SUU campus" naming the institution as sender.
    18. present: It names "Local law enforcement" and references "the SUU campus" identifying both an authority and the issuing institution.
    19. present: The text names "Local law enforcement" and references the SUU campus as the issuing context, identifying a responding authority.
    20. present: It names "Local law enforcement" and references "the SUU campus", identifying the issuing authority.
    21. present: Names "SUU campus" and "Local law enforcement", identifying the issuing/responding authority.
    22. present: Names "local law enforcement" as responding authority and references "the SUU campus" as the issuing institution.
    23. present: It names "SUU campus" and "Local law enforcement", identifying the issuing/responding authority.
    24. present: The text names "Local law enforcement" and refers to "SUU", identifying the responding authority.
    25. present: The text names "Local law enforcement" and identifies "the SUU campus", so an issuing/responding authority is present.
  • Hazardpresent25/25

    Final assessment

    Unanimous that the hazard is named, "an active shooter", even though described as unconfirmed.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: States "an active shooter", a specific threat, even though unconfirmed.
    2. present: It names "an active shooter", a specific threat.
    3. present: States "an active shooter", a specific threat, even if unconfirmed.
    4. present: It names "an active shooter", a specific threat, even though "unconfirmed".
    5. present: States "an active shooter", a specific threat.
    6. present: It names "an active shooter", a specific threat.
    7. present: It reports "an active shooter on the SUU campus", a specific threat.
    8. present: States "an active shooter", a specific named threat.
    9. present: States "an active shooter", a specific threat, despite being "unconfirmed".
    10. present: It names an "active shooter" report, a specific threat.
    11. present: It reports "an active shooter on the SUU campus", a specific threat.
    12. present: States "an active shooter", a specific threat, despite being unconfirmed.
    13. present: States an "unconfirmed report of an active shooter", a specific threat.
    14. present: It names "an active shooter" as the specific threat, even though unconfirmed.
    15. present: It states "an active shooter", a specific threat, despite being unconfirmed.
    16. present: States "report of an active shooter", a specific named threat.
    17. present: It names "an active shooter", a specific threat, despite being unconfirmed.
    18. present: It names "an active shooter", a specific threat, even though described as an unconfirmed report.
    19. present: It states an "unconfirmed report of an active shooter", naming a specific threat.
    20. present: It reports "an active shooter on the SUU campus", a specific named threat.
    21. present: States "an active shooter", a specific threat.
    22. present: States "an active shooter" as the specific threat, despite being unconfirmed.
    23. present: It names "an active shooter", a specific threat, even if unconfirmed.
    24. present: It names "an active shooter", a specific threat, even if unconfirmed.
    25. present: It states "an active shooter", a specific named threat.
  • Locationpresent25/25

    Final assessment

    All 25 reads find a location, "the SUU campus in Cedar City".

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Locates it on "the SUU campus in Cedar City".
    2. present: It says "on the SUU campus in Cedar City", a specific place.
    3. present: Says "on the SUU campus in Cedar City", a specific place.
    4. present: It says "on the SUU campus in Cedar City", a specific place.
    5. present: Says "on the SUU campus in Cedar City", a specific place.
    6. present: It says "on the SUU campus in Cedar City", a specific place.
    7. present: It places the threat "on the SUU campus in Cedar City", a specific location.
    8. present: Says "on the SUU campus in Cedar City", a specific place.
    9. present: Locates it on "the SUU campus in Cedar City".
    10. present: It says "SUU campus in Cedar City", a specific place.
    11. present: It locates the threat "on the SUU campus in Cedar City".
    12. present: Locates it on "the SUU campus in Cedar City".
    13. present: Says "on the SUU campus in Cedar City", a specific location.
    14. present: It locates the threat on "the SUU campus in Cedar City", a named place.
    15. present: It locates the threat "on the SUU campus in Cedar City", a specific place.
    16. present: Says it is "on the SUU campus in Cedar City", a specific location.
    17. present: It locates the threat "on the SUU campus in Cedar City", a named place.
    18. present: It locates the report "on the SUU campus in Cedar City", a specific place.
    19. present: It locates the threat on "the SUU campus in Cedar City", a named place.
    20. present: It locates the threat "on the SUU campus in Cedar City", a specific place.
    21. present: Says "on the SUU campus in Cedar City", a specific place.
    22. present: Says "the SUU campus in Cedar City", a specific place.
    23. present: It locates the threat on "the SUU campus in Cedar City".
    24. present: It says "on the SUU campus in Cedar City", a specific place.
    25. present: It locates the report on "the SUU campus in Cedar City".
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is given: "be alert and notify authorities of any suspicious activity".

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    2. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    3. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    4. present: It instructs recipients to "be alert and notify authorities", a protective action.
    5. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    6. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    7. present: It instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    8. present: Instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    9. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    10. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    11. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    12. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    13. present: Instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    14. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    15. present: It instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    16. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    17. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    18. present: It instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    19. present: It instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    20. present: It instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    21. present: Instructs recipients to "be alert and notify authorities of any suspicious activity".
    22. present: Instructs recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    23. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
    24. present: It tells recipients to "be alert and notify authorities of any suspicious activity", a protective action.
    25. present: It instructs recipients to "be alert and notify authorities of any suspicious activity".
  • Timepresent25/25

    Final assessment

    Unanimous that timing is present via the recency cues "at this time" and "en route".

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: Says "at this time", a recency cue.
    2. present: It says "at this time" and that law enforcement "is en route", conveying current recency.
    3. present: Says "at this time", a recency cue conveying the present moment.
    4. present: It uses "at this time" and "is en route", conveying recency of the ongoing situation.
    5. present: Uses "at this time" and "is en route", conveying present recency.
    6. present: It uses "at this time" and "en route", conveying current recency.
    7. present: It says "at this time" and "is en route", conveying current recency.
    8. present: Says "at this time" and notes law enforcement "is en route", conveying current recency.
    9. present: Uses recency phrase "at this time".
    10. present: It says "at this time" and "en route", conveying current recency.
    11. present: It says "at this time" and "en route", conveying current recency.
    12. present: Says "at this time" and that police are "en route", conveying current recency.
    13. present: Uses "at this time" and "is en route" conveying current recency.
    14. present: It uses recency cues "at this time" and says law enforcement "is en route", conveying ongoing immediacy.
    15. present: It uses recency cues "at this time" and says law enforcement "is en route", conveying current status.
    16. present: Includes the recency cue "at this time".
    17. present: It says "at this time", a recency cue indicating the present moment.
    18. present: It uses recency cues "at this time" and notes law enforcement "is en route", conveying an ongoing now.
    19. present: It says "No further details are available at this time", a recency cue.
    20. present: It says "at this time", a recency cue indicating the current moment.
    21. present: Says "at this time" and notes "Local law enforcement is en route", conveying current recency.
    22. present: Uses recency cue "at this time" and references the report being current.
    23. present: The phrase "at this time" and "is en route" convey present recency.
    24. present: It says "at this time", a recency cue.
    25. present: It says "at this time" and that law enforcement "is en route", conveying current recency.
  • Impactabsent3/25

    Final assessment

    Absent by majority (22 of 25); an unconfirmed active shooter report with no details urges alertness but states no confirmed harm or severity, though a few read active shooter as conveying lethal danger.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: Cites an unconfirmed active shooter report and advises being alert but states no confirmed harm or danger.
    2. absent: It reports an unconfirmed active shooter report with no further details and asks people to be alert but states no harm or severity.
    3. absent: It reports an unconfirmed active shooter report and urges alertness but states no harm or confirmed danger.
    4. absent: It reports an unconfirmed report of an active shooter and to be alert but states no harm or severity beyond naming the hazard.
    5. absent: Reports an unconfirmed active shooter report and instructs being alert but explicitly states no further details and frames it as unconfirmed.
    6. absent: States an unconfirmed report of an active shooter with no further details, not stating any harm or confirmed danger.
    7. absent: Reports an unconfirmed active shooter report and asks people to be alert but states no harm or confirmed danger.
    8. absent: It reports an unconfirmed active shooter report and urges alertness but states no consequence or stated harm.
    9. absent: Reports an unconfirmed active shooter report and directs alertness, naming the hazard without an explicit statement of harm.
    10. absent: It reports an unconfirmed report of an active shooter and tells people to be alert but states no harm or how dangerous the situation is.
    11. absent: Reports an unconfirmed report of an active shooter with no further details and advises being alert without stating consequence.
    12. absent: It reports an unconfirmed active shooter report with no further details and advises being alert without stating any harm or severity.
    13. absent: Reports an unconfirmed active shooter report and advises being alert without stating any harm or severity.
    14. present: It reports an unconfirmed active shooter report and urges alertness, with the active shooter framing conveying potential lethal danger.
    15. absent: The text reports an unconfirmed active shooter report with no further details and says to be alert but states no harm or stated severity.
    16. present: Cites an unconfirmed report of an active shooter and urges alertness, with active shooter conveying potential lethal danger despite being unconfirmed.
    17. absent: It reports an unconfirmed report of an active shooter and to be alert but states no harm or severity beyond naming the hazard.
    18. absent: Cites an unconfirmed report of an active shooter with no further details and directs alertness but states no harm or severity.
    19. absent: Reports an unconfirmed active shooter report with no details and urges being alert without stating any harm or stated severity.
    20. absent: Names an unconfirmed report of an active shooter and advises alertness but states no harm or severity.
    21. absent: Reports an unconfirmed active shooter report and advises being alert but states no injury or explicit danger and notes it is unconfirmed.
    22. present: States an unconfirmed report of an active shooter on campus and advises being alert, with an active shooter report implying potential danger to life.
    23. absent: It reports an unconfirmed active shooter report with no further details and tells people to be alert without stating any harm or confirmed danger.
    24. absent: Reports an unconfirmed active shooter report and advises being alert without stating any harm or severity.
    25. absent: It reports an unconfirmed active shooter report and advises alertness but states no harm or injury.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

The SUU swatting incident was part of a nationwide pattern of campus swatting hoaxes that accelerated through 2024 and into 2025. SUU President Mindy Benson confirmed the threat was most likely a swatting call, in which an individual makes a prank call to emergency services to provoke a large armed response to a specific location. The FBI was called in to investigate the origin of the call. Cedar City is a small community in southern Utah, and the lockdown affected not only the university but also nearby schools that went on precautionary lockdown. Local news coverage noted that reports of sounds resembling shots near the Science Building around 10:00 AM MDT caused secondary alarm, though law enforcement quickly determined no shots had been fired. The incident highlights how swatting exploits the mandatory response protocols that universities have developed since the Virginia Tech shooting in 2007.
Analysis

Key Findings

Swatting calls can paralyze an entire campus for hours even when no actual threat exists, consuming enormous law enforcement resources
Secondary reports of suspicious sounds during a lockdown can amplify alarm, as occurred with the unconfirmed noise near the Science Building
The nearly four-hour lockdown required clearing approximately 20 buildings, illustrating the scale of response a single phone call can trigger
The FBI's involvement reflects the federal interest in campus swatting as an interstate crime that often originates from outside the targeted community
Outcome
Determined to be a swatting hoax. No shots fired, no injuries. FBI investigating the origin of the phone call. All buildings cleared by 1:10 PM MDT.
Provenance

Sources

  1. Official
    Update on Active Shooter Threat at SUU
    suu.edu
    archived copy
  2. News
    Police, FBI investigating if SUU active shooter threat is hoax
    ksl.com
    archived copy
  3. News
    Was active shooter threat at SUU swatting? What we know
    deseret.com
    archived copy
  4. News
    Southern Utah University hoax active shooter threat was likely swatting
    fox13now.com
    archived copy
Cite this case

Campus Alert Archive. "Southern Utah University: False active-shooter call prompts a four-hour search of about 20 buildings." Incident of April 11, 2024. Added April 2026; last updated July 2026. https://campusalertarchive.com/case/southern-utah-university-swatting-2024-04-11/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattinghoaxactive-shooter-false-alarmlockdownfbiutahpublic-mastersHoax
Added April 2026Updated July 2026Via ingestion