False shots-fired reports prompted a shelter-in-place lasting more than three hours
AI-generated · every claim is source-linkedOn August 25, 2025, false reports of shots fired near Norlin Library triggered a campus-wide shelter-in-place order at CU Boulder lasting over three hours. The online extremist group Purgatory later claimed responsibility for the hoax, which was part of a wave of university swatting incidents.
- Alerts
- 5
- Response
- —
- Killed
- —
- Injured
- —
Alert Sequence
5 messages in sequence · 5 verified verbatim
How the first alert is built
To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.
CU EMERGENCY ALERT: Police activity near Norlin Library. Campus-wide shelter in place issued. Emergency personnel responding. Avoid area.
Sourcepresent25/25
Final assessment
All 25 reads agree the sender is present; the message opens with the branded "CU EMERGENCY ALERT".
Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.
See all 25 individual reads
- present: It opens with "CU EMERGENCY ALERT:", a branded signature identifying the sender.
- present: The branded signature "CU EMERGENCY ALERT" identifies the sender.
- present: The branded tag "CU EMERGENCY ALERT" identifies the university sender.
- present: It opens with "CU EMERGENCY ALERT" and names "Emergency personnel", identifying the sender.
- present: The message opens with "CU EMERGENCY ALERT", a branded sender signature.
- present: The message opens with the branded signature "CU EMERGENCY ALERT", which identifies the sender.
- present: Opens with "CU EMERGENCY ALERT", identifying the issuing system.
- present: Opens with branded signature "CU EMERGENCY ALERT", identifying the sender, and references "Emergency personnel".
- present: Opens with "CU EMERGENCY ALERT" and names "Emergency personnel", identifying the sender.
- present: It is headed "CU EMERGENCY ALERT", a branded sender tag, and references "Emergency personnel".
- present: Opens with "CU EMERGENCY ALERT", identifying the sender.
- present: Opens with the branded signature "CU EMERGENCY ALERT", identifying the sender.
- present: The branded signature "CU EMERGENCY ALERT" identifies the sender.
- present: Opens with the branded signature "CU EMERGENCY ALERT", identifying the sender.
- present: Opens with "CU EMERGENCY ALERT" and names "Emergency personnel", a signature and authority.
- present: Opens with "CU EMERGENCY ALERT", identifying the sender.
- present: Opens with "CU EMERGENCY ALERT", a branded signature identifying the sender.
- present: The message opens with "CU EMERGENCY ALERT" and references "Emergency personnel", identifying the sender.
- present: The message opens with "CU EMERGENCY ALERT", a branded sender signature.
- present: It opens with the branded sender "CU EMERGENCY ALERT", identifying the issuer.
- present: Opens with branded signature "CU EMERGENCY ALERT", identifying the sender.
- present: It opens with "CU EMERGENCY ALERT", a branded sender signature, and names "Emergency personnel".
- present: It is a "CU EMERGENCY ALERT" naming "Emergency personnel", identifying the source.
- present: Opens with the branded signature "CU EMERGENCY ALERT", identifying the sender.
- present: It opens with "CU EMERGENCY ALERT", a branded signature identifying the sender.
Hazardabsent0/25
Final assessment
All 25 reads agree no specific hazard is named; the alert cites only "Police activity".
What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.
See all 25 individual reads
- absent: It cites "Police activity" but never names a specific threat.
- absent: It names only "Police activity", which is not a specific hazard.
- absent: It cites "Police activity", naming no specific hazard.
- absent: It cites "Police activity" but names no specific hazard.
- absent: It cites only "Police activity" without naming a specific threat.
- absent: No specific hazard is named; "Police activity" does not name the threat.
- absent: Cites "Police activity" but names no specific threat.
- absent: It cites "Police activity" but names no specific threat in this text.
- absent: Says only "Police activity" with no specific hazard named.
- absent: No specific threat is named; "Police activity" does not state the hazard.
- absent: "Police activity" is generic and names no specific hazard in this text.
- absent: It says "Police activity", which is generic and does not name a specific hazard.
- absent: It cites "Police activity" but names no specific hazard.
- absent: No specific hazard is named; it cites only "Police activity", not the threat itself.
- absent: Refers only to "Police activity", naming no specific hazard.
- absent: Only "Police activity" is cited, with no specific hazard named.
- absent: No specific hazard is named, only "Police activity", which does not name a threat.
- absent: It cites "Police activity" but names no specific hazard.
- absent: It says "Police activity" but names no specific hazard.
- absent: It cites only "Police activity", a generic phrase naming no specific hazard.
- absent: Only "Police activity" appears, no specific hazard named.
- absent: Only "Police activity" is stated; no specific hazard type like shooter or bomb is named.
- absent: It cites generic "Police activity"; no specific hazard is named.
- absent: No specific threat is named; only generic "Police activity".
- absent: It cites "Police activity" but names no specific hazard, only a generic emergency.
Locationpresent25/25
Final assessment
All reads agree a location is present, naming Norlin Library and the area.
Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.
See all 25 individual reads
- present: It names "Norlin Library" and "area", specific places.
- present: It names "Norlin Library", a specific place.
- present: It names "Norlin Library", a specific campus location.
- present: It names "near Norlin Library", a specific place.
- present: It names "Norlin Library" and "Campus-wide", specific places.
- present: It names "near Norlin Library" and is "Campus-wide", specific locations.
- present: Names "Norlin Library" and "Campus-wide", specific places.
- present: It names "near Norlin Library" and "Campus-wide", specific places.
- present: Names "near Norlin Library", a specific place.
- present: It names "near Norlin Library", a specific place.
- present: Says "near Norlin Library" and "Campus-wide", specific locations.
- present: It names "Norlin Library", a specific place.
- present: It names "Norlin Library", a specific place.
- present: Specifies "near Norlin Library", a named place.
- present: Names "Norlin Library", a specific location.
- present: Names "near Norlin Library" and "Campus-wide", specific locations.
- present: Names "Norlin Library" and "Campus-wide", specific places.
- present: It names "near Norlin Library", a specific location.
- present: It names "Norlin Library", a specific place.
- present: It names the area "near Norlin Library", a specific place.
- present: Names "Norlin Library", a specific place.
- present: It names "Norlin Library" and "Campus-wide", specific places.
- present: It names "Norlin Library", a specific place.
- present: Names "Norlin Library", a specific location.
- present: It names "Norlin Library", a specific place.
Guidancepresent25/25
Final assessment
All 25 reads agree guidance is present; recipients are told to shelter in place and avoid the area.
The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.
See all 25 individual reads
- present: It instructs recipients to "shelter in place" and "Avoid area", protective actions.
- present: It instructs a "Campus-wide shelter in place" and to "Avoid area".
- present: It issues a "shelter in place" and instructs recipients to "Avoid area".
- present: It instructs "shelter in place" and "Avoid area", protective actions.
- present: It instructs a "Campus-wide shelter in place" and to "Avoid area".
- present: It instructs recipients via "shelter in place" and "Avoid area", protective actions.
- present: Issues a "shelter in place" and instructs to "Avoid area", protective actions.
- present: It states a "shelter in place" is issued and tells recipients to "Avoid area", protective actions.
- present: States a "Campus-wide shelter in place" and "Avoid area", protective actions.
- present: It instructs recipients that a "shelter in place" is issued and to "Avoid area", protective actions.
- present: States "shelter in place issued" and "Avoid area", protective actions for recipients.
- present: It instructs a "Campus-wide shelter in place" and to "Avoid area".
- present: It instructs "shelter in place" and "Avoid area", protective actions.
- present: Instructs "Campus-wide shelter in place" and "Avoid area", protective actions.
- present: Says a "Campus-wide shelter in place issued" and to "Avoid area", protective actions.
- present: Instructs a "shelter in place" and to "Avoid area", protective actions.
- present: Instructs recipients via "shelter in place issued" and "Avoid area".
- present: It instructs people to "shelter in place" and "Avoid area", protective actions.
- present: It says a "shelter in place issued" and instructs to "Avoid area", protective actions.
- present: It states "shelter in place issued" and tells recipients to "Avoid area".
- present: Instructs recipients to "shelter in place" and "Avoid area".
- present: It instructs "shelter in place" and "Avoid area", protective actions.
- present: It instructs "shelter in place" and "Avoid area", protective actions.
- present: Instructs a "Campus-wide shelter in place" and to "Avoid area", protective actions.
- present: It states a "shelter in place" and to "Avoid area", protective actions.
Timeabsent0/25
Final assessment
All 25 reads agree no timing is present; no clock time, date, or recency cue appears.
When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.
See all 25 individual reads
- absent: No clock time, date, or recency cue such as "now" appears.
- absent: No clock time, date, or recency cue appears.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency word appears.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue appears.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue such as now or immediately appears.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency word appears in the message.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency word appears in the text.
- absent: No clock time, date, or recency word appears in the message.
- absent: No clock time, date, or recency cue appears.
- absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
- absent: No clock time, date, or recency cue appears.
- absent: No clock time, date, or recency cue appears in the text.
- absent: No clock time, date, or recency cue appears.
Impactabsent3/25
Final assessment
Final call absent; a strong majority found no stated harm or consequence beyond the hazard or notice, with minimal dissent.
What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.
See all 25 individual reads
- absent: Reports police activity and a shelter in place with no stated harm or danger.
- absent: Reports police activity and a shelter in place without stating any consequence or harm.
- present: Issues a campus-wide shelter in place for police activity with emergency personnel responding, conveying a danger.
- absent: It reports police activity and a shelter-in-place but states no harm or danger detail beyond police activity.
- absent: Reports police activity and a shelter in place but states no harm or what the threat could do.
- absent: Reports police activity and a shelter in place without stating any explicit harm or danger consequence.
- present: It cites police activity and an active threat with a campus-wide shelter in place, implying explicit danger.
- absent: Police activity with shelter in place states guidance but no explicit harm or consequence.
- absent: Reports police activity and a shelter in place without stating explicit harm or danger.
- absent: Reports police activity and a shelter in place without stating any harm or how dangerous it is.
- absent: It reports police activity and a shelter-in-place but states no explicit harm or specific danger.
- absent: It reports police activity and a campus-wide shelter in place but states no explicit danger or harm.
- absent: It reports police activity and a shelter in place without stating any explicit harm or severity.
- absent: It reports police activity and a shelter in place but states no explicit harm or danger detail.
- absent: Reports police activity and campus shelter in place but states no explicit harm or danger consequence.
- absent: Reports police activity and a shelter in place with no stated harm or danger.
- absent: It reports police activity and a campus-wide shelter in place but states no explicit harm or consequence.
- absent: It reports police activity and a shelter-in-place but states no explicit harm or danger.
- absent: It names police activity and a shelter-in-place but states no explicit harm or consequence.
- present: Reports police activity and a campus-wide shelter in place for an active threat, implying danger to people.
- absent: It reports police activity and a shelter in place but states no explicit harm or specific danger.
- absent: It reports police activity and a campus-wide shelter-in-place but states no explicit harm, danger, or severity.
- absent: Reports police activity and shelter in place but states no explicit harm or severity.
- absent: It reports police activity and shelter in place but states no consequence or harm explicitly.
- absent: It reports police activity and a campus-wide shelter in place but states no explicit harm or danger characterization.
Systematic AI judgments with visible reasoning, not human-validated codings.
About this analysisBackground
Key Findings
Sources
- Official
- Official
- News
- News
- News
- Official
- Official
Campus Alert Archive. "University of Colorado Boulder: False shots-fired reports prompted a shelter-in-place lasting more than three hours." Incident of August 25, 2025. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/university-of-colorado-boulder-swatting-2025-08-25/
Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.