Campus Alert Archive
SUNY Oneonta

Shooting threat traced to a student's hacked phone; 44-minute shelter-in-place

AI-generated · every claim is source-linked
NYthreat of violenceemergency notificationmedium confidence
Compare →
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On October 2, 2019, SUNY Oneonta sheltered in place for 44 minutes after a New York City crisis hotline relayed a chat message threatening to shoot people on campus. Investigators determined within an hour that the threat originated from a SUNY Oneonta student's hacked phone and that the student herself was not involved.

Alerts
2
Response
112 min
Killed
0
Injured
0
Institution
State University of New York at Oneonta
Public Masters · NY
All SUNY Oneonta cases →
~6,500 studentsRaveO-Alert
Documented Timeline

Alert Sequence

2 messages in sequence · 1 verified verbatim

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTSMS
Verified verbatimWETM-TV (MyTwinTiers) verbatim quote of the O-Alert message173 chars
University Police has received notification that a current student believed to be on campus is threatening to shoot members of the campus community. Please shelter in place.
Pushed at 5:30 PM EDT on October 2, 2019, roughly two hours after a New York City crisis hotline relayed the threat chat message to SUNY Oneonta
Notable for describing the threat actor as 'a current student believed to be on campus'; investigators later determined the student's phone had been hacked and she was not involved
Sent via the O-Alert system (Rave-powered NY-Alert deployment) through SMS, email, and voice channels
ALL CLEARSMS+44 min
Wording not preserved
A all clear message is documented at this point in the sequence, but its exact wording is not preserved in the public record. The public edition displays only confirmed alert text.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

University Police has received notification that a current student believed to be on campus is threatening to shoot members of the campus community. Please shelter in place.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the source is present: the message names University Police as the issuing authority.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It names "University Police", identifying the source.
    2. present: It names "University Police", the issuing authority.
    3. present: It names "University Police", the issuing authority.
    4. present: It names "University Police" as the issuing authority.
    5. present: It names "University Police", the issuing authority.
    6. present: It names "University Police", the issuing authority.
    7. present: "University Police" is named as the issuing authority.
    8. present: It names "University Police", identifying the sender.
    9. present: It names "University Police", the issuing authority.
    10. present: It names "University Police", the responding authority.
    11. present: It names "University Police" as the issuing authority.
    12. present: "University Police" is named as the receiving and issuing authority.
    13. present: It names "University Police", the issuing authority.
    14. present: "University Police" is named as the authority that received notification.
    15. present: It names "University Police", the issuing authority.
    16. present: "University Police" is named as the notified authority.
    17. present: It names "University Police", the issuing authority.
    18. present: It names "University Police" as the notifying authority.
    19. present: It names "University Police" as the authority that received the notification.
    20. present: The text identifies "University Police" as the sender.
    21. present: It names "University Police", the issuing authority.
    22. present: It names "University Police", identifying the issuing agency.
    23. present: It names "University Police" as the receiving/responding authority.
    24. present: "University Police" identifies the issuing authority.
    25. present: It names "University Police", the issuing authority.
  • Hazardpresent25/25

    Final assessment

    Unanimous that the hazard is named: the message describes a student threatening to shoot members of the campus community.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    2. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    3. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    4. present: It names a student "threatening to shoot members of the campus community", a specific threat.
    5. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    6. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    7. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    8. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    9. present: It names a student "threatening to shoot members of the campus community", a specific threat.
    10. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    11. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    12. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    13. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    14. present: It names a student "threatening to shoot members of the campus community", a specific threat.
    15. present: It reports a student "threatening to shoot members of the campus community", a specific threat.
    16. present: It names a student "threatening to shoot members of the campus community", a specific hazard.
    17. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    18. present: It describes a student "threatening to shoot members of the campus community," a specific threat.
    19. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    20. present: It names the threat: a student "threatening to shoot members of the campus community".
    21. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    22. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    23. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    24. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
    25. present: It describes a student "threatening to shoot members of the campus community", a specific threat.
  • Locationpresent25/25

    Final assessment

    All 25 reads find location present: the student is believed to be on campus.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It says "on campus", a location reference.
    2. present: It says "on campus", a location cue.
    3. present: It says "on campus", a location.
    4. present: It specifies "on campus".
    5. present: It says "on campus", a location reference.
    6. present: It says "on campus", a location.
    7. present: It says the student is "believed to be on campus", a location reference.
    8. present: It says "on campus", a location.
    9. present: It says the student is "believed to be on campus", a location.
    10. present: It says "on campus", a location reference.
    11. present: It references the student "believed to be on campus", a location reference.
    12. present: It cites being "on campus", a location reference.
    13. present: It says the student is "believed to be on campus", a location reference.
    14. present: It refers to the student being "on campus", a location cue.
    15. present: It says the student is "believed to be on campus", a location reference.
    16. present: It says the student is "believed to be on campus", a location cue.
    17. present: It says the student is "believed to be on campus", a location.
    18. present: It says the student is "believed to be on campus," a location.
    19. present: It says the student is "believed to be on campus", a location reference.
    20. present: It references the student being "on campus".
    21. present: It says the student is "believed to be on campus", a location reference.
    22. present: It says the student is "believed to be on campus", a location cue.
    23. present: It says the student is "believed to be on campus", a location.
    24. present: It references "on campus", a location.
    25. present: It says the student is "believed to be on campus", a location cue.
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is present: the message instructs recipients to shelter in place, a protective action.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It instructs recipients to "shelter in place", a protective action.
    2. present: It instructs "Please shelter in place", a protective action.
    3. present: It instructs recipients to "shelter in place", a protective action.
    4. present: It instructs recipients to "shelter in place".
    5. present: It instructs "Please shelter in place", a protective action.
    6. present: It instructs "Please shelter in place", a protective action.
    7. present: It instructs "shelter in place", a protective action.
    8. present: It instructs recipients to "shelter in place".
    9. present: It instructs "Please shelter in place", a protective action.
    10. present: It instructs recipients to "shelter in place", a protective action.
    11. present: It instructs recipients to "shelter in place", a protective action.
    12. present: It instructs recipients to "shelter in place", a protective action.
    13. present: It instructs recipients to "shelter in place", a protective action.
    14. present: It instructs recipients to "shelter in place", a protective action.
    15. present: It instructs recipients to "shelter in place", a protective action.
    16. present: It instructs "Please shelter in place", a protective action.
    17. present: It instructs to "shelter in place", a protective action.
    18. present: It instructs recipients to "shelter in place," a protective action.
    19. present: It instructs to "shelter in place", a protective action.
    20. present: It instructs recipients to "shelter in place".
    21. present: It instructs recipients to "shelter in place", a protective action.
    22. present: It instructs recipients to "shelter in place."
    23. present: It instructs recipients to "shelter in place", a protective action.
    24. present: It instructs recipients to "shelter in place", a protective action.
    25. present: It instructs recipients to "shelter in place", a protective action.
  • Timeabsent0/25

    Final assessment

    All 25 reads agree no time element appears: no clock time, date, or recency word is present.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency word such as "now" appears.
    2. absent: No clock time, date, or recency word appears in the text.
    3. absent: No clock time, date, or recency cue appears in the text.
    4. absent: No clock time, date, or recency cue appears in the text.
    5. absent: No clock time, date, or recency cue appears in the text.
    6. absent: No clock time, date, or recency cue appears in the text.
    7. absent: No clock time, date, or recency cue appears in the text.
    8. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    9. absent: No clock time, date, or recency cue is present.
    10. absent: No clock time, date, or recency cue such as "now" appears.
    11. absent: No clock time, date, or recency word appears in the text.
    12. absent: No clock time, date, or recency cue appears in the text.
    13. absent: No clock time, date, or recency cue such as "now" appears.
    14. absent: No clock time, date, or recency word like "now" appears in the text.
    15. absent: No clock time, date, or recency cue such as "now" appears in the text.
    16. absent: No clock time, date, or recency word such as "now" appears.
    17. absent: No clock time, date, or recency word appears in the text.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    20. absent: No clock time, date, or recency word is present.
    21. absent: No clock time, date, or recency cue appears.
    22. absent: No clock time, date, or recency cue appears in the text.
    23. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    24. absent: No clock time, date, or recency word appears in the text.
    25. absent: No clock time, date, or recency cue appears in the text.
  • Impactpresent25/25

    Final assessment

    Present by unanimous agreement; a student threatening to shoot members of the campus community conveys an explicit potential lethal danger to people.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: States a student is threatening to shoot members of the campus community, a strongly implied lethal threat.
    2. present: It states a student is threatening to shoot members of the campus community and orders shelter in place, an explicit threat of lethal violence.
    3. present: It reports a student is threatening to shoot members of the campus community, conveying a clear threat of violent harm to people.
    4. present: It reports a student is threatening to shoot members of the campus community and orders shelter in place, with the threat to shoot conveying danger.
    5. present: States a student is threatening to shoot members of the campus community, conveying a deadly threat to people.
    6. present: States a student is threatening to shoot members of the campus community, conveying an explicit threat of deadly harm.
    7. present: States a student is threatening to shoot members of the campus community, conveying an explicit violent threat.
    8. present: It states a student is threatening to shoot members of the campus community, conveying a stated intent to cause harm to people.
    9. present: Reports a student is threatening to shoot members of the campus community, conveying a stated threat of deadly harm.
    10. present: It states a student is threatening to shoot members of the campus community and orders shelter in place, conveying a clear threat of violence.
    11. present: States a student is threatening to shoot members of the campus community, a stated intent to cause violent harm.
    12. present: It states a student is threatening to shoot members of the campus community and instructs shelter in place, conveying a danger of armed violence.
    13. present: States a student is threatening to shoot members of the campus community, a clearly stated threat of lethal harm.
    14. present: It reports a student threatening to shoot members of the campus community, an explicit threat of lethal harm.
    15. present: The text reports a student threatening to shoot members of the campus community and orders sheltering, conveying a stated threat of violence.
    16. present: States a student is threatening to shoot members of the campus community and orders shelter in place, with the threat to shoot conveying potential lethal danger.
    17. present: It reports a student is threatening to shoot members of the campus community, an explicit threat of violent harm.
    18. present: States a student is threatening to shoot members of the campus community, conveying a stated threat of harm to people.
    19. present: States a student is threatening to shoot members of the campus community and instructs sheltering, and the threat to shoot conveys a clear danger of harm.
    20. present: States a student is threatening to shoot members of the campus community, conveying an explicit stated intent to cause harm.
    21. present: States a student is threatening to shoot members of the campus community, an explicit threat of deadly violence conveying danger.
    22. present: States a student is threatening to shoot members of the campus community and orders shelter in place, a clear threat of violence implying danger to life.
    23. present: It states a student is threatening to shoot members of the campus community and orders shelter in place, conveying a stated threat of deadly violence.
    24. present: States a student is threatening to shoot members of the campus community, a directly stated threat of violent harm.
    25. present: It reports a student is threatening to shoot members of the campus community and orders shelter in place, a clearly stated threat of deadly harm.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Just after 3:38 PM EDT on October 2, 2019, a New York City crisis hotline contacted SUNY Oneonta to report a chat message that appeared to come from a SUNY Oneonta student threatening to shoot members of the campus community. The college's initial review judged the message credible enough to push an O-Alert shelter-in-place at 5:30 PM EDT, and the campus sheltered in place. Within the next 44 minutes, University Police located the student named in the chat, who had separately reported to City of Oneonta Police that her phone had been hacked and was at that moment working with campus Information Technology Services to remediate. SUNY Oneonta lifted the shelter-in-place at 6:14 PM EDT and characterized the underlying event as a 'cyber-crime' that 'posed no actual danger.' The incident drew later criticism over the response time (almost two hours elapsed between the hotline call and the first O-Alert) and stands as an early documented case of a hacked-phone vector producing a credible-looking campus shooting threat. Investigative partners included Oneonta Police, Otsego County law enforcement, the New York State Police, NYPD, and the FBI.
Analysis

Key Findings

Roughly two hours elapsed between the crisis-hotline call (3:38 PM EDT) and the first O-Alert (5:30 PM EDT), drawing later criticism
The shelter-in-place lasted 44 minutes, from 5:30 PM to 6:14 PM EDT on October 2, 2019
An early documented case of a hacked-phone vector producing a credible-looking campus shooting threat, anticipating later swatting and SIM-jack hoax waves
Outcome
University Police, working with Oneonta Police, Otsego County law enforcement, New York State Police, NYPD, and the FBI, interviewed the student whose phone was hacked and confirmed she had been working with college Information Technology Services on the cyber-crime before the threat was sent. The shelter-in-place directive issued at 5:30 PM EDT was lifted at 6:14 PM EDT.
Provenance

Sources

  1. News
    SUNY Oneonta locks down after reported threat (The Daily Star)
    thedailystar.com
    archived copy
  2. News
    UPDATE: Threat of violence at SUNY Oneonta the result of a cyber-crime (WETM)
    mytwintiers.com
    archived copy
  3. News
    SUNY Oneonta Shooter Threat Resulted from a Phone Hack (WNBF)
    wnbf.com
    archived copy
  4. News
    UPDATE: SUNY Oneonta Shooting Threat; Shelter Order Lifted (CNY News)
    cnynews.com
    archived copy
  5. News
    SUNY Oneonta faces criticism after reported threat (The Daily Star)
    thedailystar.com
    archived copy
  6. News
    Police: SUNY Shooting Threat Was Made On Hacked Phone (AllOtsego)
    allotsego.com
    archived copy
Cite this case

Campus Alert Archive. "State University of New York at Oneonta: Shooting threat traced to a student's hacked phone; 44-minute shelter-in-place." Incident of October 2, 2019. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/suny-oneonta-active-shooter-hoax-2019-10-02/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
threat-of-violencehoaxcyber-crimehacked-phonesunynew-yorkshelter-in-placeo-alertpublic-mastersHoax
Added May 2026Updated July 2026Via ingestion