Skip to content
Campus Alert Archive
UMD

Early-morning false report of a rifle near the main library; no evidence of gunfire found

AI-generated · every claim is source-linked
MDswattingemergency notificationmedium confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

At 4:17 AM EDT on September 2, 2025, a false report of a person with an AR-style weapon was called in to Prince George's County Public Safety Communications, claiming an active shooter near McKeldin Library on UMD's campus. A UMPD officer already patrolling McKeldin Mall at that time saw and heard nothing suspicious, and the university's gunshot detection system confirmed no shots fired. UMD was one of approximately 20 universities targeted by swatting hoaxes that week.

Alerts
1
Response
Killed
0
Injured
0
Institution
University of Maryland, College Park
Public R1 · MD
All UMD cases →
~41,000 studentsUMD Alerts
Official alert policy
Read when and how UMD says it will use UMD Alerts: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

1 message in sequence · 1 verified verbatim

FOLLOW-UPEmail
At 4:17 a.m., UMPD was notified by the Prince George's County Public Safety Communications of a similar report in the McKeldin Library area. A UMPD officer was already patrolling McKeldin Mall. That officer had not heard or seen anything suspicious, and UMPD did not receive a notification from our gun-shot detection technology system. With the assistance from our allied agencies and our Security Operations Center, it was determined that this call was a false report and there was no threat to our community.
Verbatim text from the official UMD Advisory: False Report of Campus Incident posted to alert.umd.edu on September 2, 2025
Notably, UMPD did not send a real-time emergency alert during the incident; the advisory was issued after the call had already been determined a hoax
The 4:17 AM EDT timing minimized disruption, as few students were on campus at that hour
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

At 4:17 a.m., UMPD was notified by the Prince George's County Public Safety Communications of a similar report in the McKeldin Library area. A UMPD officer was already patrolling McKeldin Mall. That officer had not heard or seen anything suspicious, and UMPD did not receive a notification from our gun-shot detection technology system. With the assistance from our allied agencies and our Security Operations Center, it was determined that this call was a false report and there was no threat to our community.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the sender is present; the message names UMPD and Prince George's County Public Safety Communications.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It names "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center", identifying sources.
    2. present: It identifies "UMPD" and "Prince George's County Public Safety Communications" as sources.
    3. present: It names "UMPD", "Prince George's County Public Safety Communications" as authorities.
    4. present: It names "UMPD" and "Prince George's County Public Safety Communications" as the authorities.
    5. present: It identifies "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center" as the source.
    6. present: It names "UMPD" and "Prince George's County Public Safety Communications", the issuing authorities.
    7. present: Identifies "UMPD" and "Prince George's County Public Safety Communications", responding authorities.
    8. present: It names "UMPD", "Prince George's County Public Safety Communications", and the "Security Operations Center", issuing authorities.
    9. present: Names "UMPD" and "Prince George's County Public Safety Communications", clear agencies.
    10. present: It names "UMPD", a "UMPD officer", and "our Security Operations Center", the issuing authority.
    11. present: Identifies "UMPD" and the "Prince George's County Public Safety Communications", the responding authorities.
    12. present: Names "UMPD" and "Prince George's County Public Safety Communications" as the issuing authorities.
    13. present: It names "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center", authorities.
    14. present: Identifies the sender as "UMPD" with allied "Prince George's County Public Safety Communications".
    15. present: Identifies "UMPD", "Prince George's County Public Safety Communications", and the Security Operations Center.
    16. present: Names "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center".
    17. present: Names "UMPD" and "Prince George's County Public Safety Communications" as authorities.
    18. present: It names "UMPD" and "Prince George's County Public Safety Communications", responding authorities.
    19. present: It names "UMPD" and "Prince George's County Public Safety Communications", responding authorities.
    20. present: It names "UMPD", "Prince George's County Public Safety", and a "Security Operations Center".
    21. present: Names "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center", authorities.
    22. present: It names "UMPD", "Prince George's County Public Safety Communications", and "Security Operations Center", identifying authorities.
    23. present: It names "UMPD" and "Prince George's County Public Safety Communications", responding authorities.
    24. present: Identifies "UMPD" and "Prince George's County Public Safety Communications" as authorities.
    25. present: It names "UMPD" and a "Security Operations Center", identifying the authority.
  • Hazardpresent23/25

    Final assessment

    Most reads find a hazard present via a report tied to gunshot detection later found false, while two dissent that no specific threat is named outright.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: It refers to "a similar report" later found false but the gunshot-detection context implies a shots-fired report, a specific threat.
    2. present: It references a "report" of shots/gun via gun-shot detection, a specific threat type, and "false report".
    3. present: It references a "report" later found false, tied to gunshot detection, a shooting threat.
    4. present: It references a "false report" of a "gun-shot detection" matter, a specific hazard claim later debunked.
    5. absent: It refers to "a similar report" later found false, never naming the specific threat itself.
    6. present: It references a report of gunshots near the library that proved false, a specific described threat.
    7. present: References a gunshot-related "report" later found false, a specific threat type.
    8. present: It refers to a "similar report" and "gun-shot detection technology" that found a "false report", a shooting hoax hazard.
    9. present: Names a "report" that proved a "false report", tied to a gunshot detection context, a specific threat.
    10. present: It refers to a "report" of an incident later found "false", with the gunshot-detection reference indicating an alleged shots-fired hazard.
    11. present: Implies a shooting via "gun-shot detection technology system" report, ultimately found a "false report".
    12. present: It names a "false report" of gunfire, referencing the gun-shot detection context as the hazard.
    13. present: It names the threat as a report investigated and a "gun-shot detection technology" check, implying shots fired.
    14. present: Names the hazard as a "false report" of a shooting-type call, a specific threat type confirmed as a hoax.
    15. present: Names a "report" of shots later found false, a specific (hoax shooting) hazard.
    16. present: References "a similar report" of gunshots and a "false report", implying a shots-fired threat that was a hoax.
    17. present: References a "report" of shots and "gun-shot detection technology", indicating a shooting hazard.
    18. absent: It refers to "a similar report" and "false report" but names no specific hazard.
    19. present: It refers to a report (of shots/gunshots) and a "gun-shot detection technology system", implying a shots-fired report, a specific threat.
    20. present: It references "a similar report" tied to a "false report" of gunshots, a specific hazard type.
    21. present: Names a "false report" of a gunshot-type incident, a specific hazard.
    22. present: It references a report of gunshots in the "McKeldin Library area" later deemed false, naming the hazard.
    23. present: It references a "report" of shots later found false, a hazard context, with "gun-shot detection technology"; a specific threat is described.
    24. present: Names a "report" of gunshots determined false, a specific threat referenced.
    25. present: It references a "report" of shots and "gun-shot detection technology", naming gunfire as the threat.
  • Locationpresent25/25

    Final assessment

    All reads agree a location is present, naming the McKeldin Library area and McKeldin Mall.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    2. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    3. present: It names "the McKeldin Library area" and "McKeldin Mall".
    4. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    5. present: It names "the McKeldin Library area" and "McKeldin Mall".
    6. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    7. present: Names "the McKeldin Library area" and "McKeldin Mall", specific places.
    8. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    9. present: Names "McKeldin Library area" and "McKeldin Mall", specific places.
    10. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    11. present: Names "the McKeldin Library area" and "McKeldin Mall", specific places.
    12. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    13. present: It names "McKeldin Library area" and "McKeldin Mall", specific places.
    14. present: Specifies "the McKeldin Library area" and "McKeldin Mall", named places.
    15. present: Names "McKeldin Library area" and "McKeldin Mall", specific locations.
    16. present: Names "McKeldin Library area" and "McKeldin Mall", specific locations.
    17. present: Names "McKeldin Library area" and "McKeldin Mall", specific places.
    18. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    19. present: It names "McKeldin Library area" and "McKeldin Mall", specific places.
    20. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    21. present: Names "McKeldin Library area" and "McKeldin Mall", specific places.
    22. present: It names "McKeldin Library area" and "McKeldin Mall", specific places.
    23. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
    24. present: Names "McKeldin Library area" and "McKeldin Mall", specific locations.
    25. present: It names "the McKeldin Library area" and "McKeldin Mall", specific places.
  • Guidanceabsent0/25

    Final assessment

    All 25 reads agree no protective action is given; the alert describes the investigation and false-report finding without instructing recipients.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. absent: It describes the police investigation but gives recipients no protective action.
    2. absent: It describes the investigation but gives recipients no protective action.
    3. absent: It explains the false-report determination, giving recipients no protective action.
    4. absent: It describes the investigation and false report but gives recipients no protective instruction.
    5. absent: It describes the investigation outcome and gives recipients no protective action.
    6. absent: It describes the investigation and outcome but gives recipients no protective action.
    7. absent: Describes investigation findings; gives recipients no protective action instruction.
    8. absent: It only reports the investigation finding no threat and gives recipients no protective action.
    9. absent: It explains the investigation outcome but gives recipients no protective action.
    10. absent: It reports the investigation conclusion but gives recipients no protective instruction.
    11. absent: It describes the investigation and conclusion but gives recipients no protective instruction.
    12. absent: It gives no protective action to recipients; it reports the investigation result.
    13. absent: It explains the investigation but gives recipients no protective action.
    14. absent: It describes responder findings but gives recipients no protective action instruction.
    15. absent: Reports an all-clear finding but gives recipients no protective action to take.
    16. absent: The message describes the investigation result and gives recipients no protective instruction.
    17. absent: No protective action is directed at recipients; it explains the all-clear determination.
    18. absent: It describes the investigation but gives recipients no protective action.
    19. absent: It describes investigation findings; no protective action instruction to recipients.
    20. absent: It describes investigation and reassurance but gives recipients no protective action.
    21. absent: No protective action instructed to recipients; describes what officers determined.
    22. absent: It explains the false report but gives recipients no protective action instruction.
    23. absent: It describes the investigation and false-report finding but gives no protective instruction.
    24. absent: Reports an investigation outcome; gives recipients no protective action instruction.
    25. absent: It reports investigation findings; it gives recipients no protective instruction.
  • Timepresent25/25

    Final assessment

    All reads agree timing is present, giving the clock time 4:17 a.m.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: It gives the clock time "4:17 a.m.", a specific time.
    2. present: "At 4:17 a.m." is a specific clock time.
    3. present: It gives the clock time "4:17 a.m." of the notification.
    4. present: It gives the time "At 4:17 a.m.", a clock time.
    5. present: It gives a clock time "At 4:17 a.m.".
    6. present: It gives the clock time "At 4:17 a.m.", a specific time reference.
    7. present: Gives the clock time "At 4:17 a.m.", a specific time reference.
    8. present: It gives the clock time "At 4:17 a.m.", a time reference.
    9. present: Says "At 4:17 a.m.", a specific clock time.
    10. present: It gives the time "At 4:17 a.m.", a time reference.
    11. present: Gives the clock time "At 4:17 a.m.", conveying when.
    12. present: It gives the clock time "At 4:17 a.m.", a time reference.
    13. present: It gives a clock time "At 4:17 a.m.", a time reference.
    14. present: Gives a clock time "At 4:17 a.m.", a specific time reference.
    15. present: Gives the clock time "At 4:17 a.m.", conveying when.
    16. present: Gives a clock time "At 4:17 a.m.", a time cue.
    17. present: Gives the clock time "At 4:17 a.m.", a time reference.
    18. present: It gives the clock time "At 4:17 a.m.", a time reference.
    19. present: It gives the time "At 4:17 a.m.", a clock time.
    20. present: It gives the clock time "At 4:17 a.m.", a specific time.
    21. present: States "4:17 a.m.", a clock time.
    22. present: It gives the clock time "At 4:17 a.m.", conveying when.
    23. present: It gives "At 4:17 a.m.", a clock time.
    24. present: Gives the clock time "At 4:17 a.m.", a time reference.
    25. present: It cites the clock time "4:17 a.m.", a time reference.
  • Impactabsent4/25

    Final assessment

    Absent by 21-4 majority; the swatting message conveys no credible threat or actual harm to the community beyond describing the false report.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: States the report was a false report with no threat to the community, explicitly conveying the absence of danger.
    2. absent: States the report was a false call and there was no threat to the community, conveying absence of harm.
    3. absent: States the report was a false report and there was no threat to the community, conveying the absence of any harm or danger.
    4. absent: It explains the gunshot report was determined to be a false report with no threat to the community, negating harm.
    5. absent: It explains a false report was determined to be no threat to the community, conveying no actual danger.
    6. absent: States the gunshot report was determined a false report with no threat to the community, conveying no actual harm.
    7. present: It states it was determined the call was a false report and there was no threat which is a clear statement that no harm exists.
    8. absent: States the report was determined to be a false report with no threat to the community, conveying no harm.
    9. absent: States the gunshot report was determined to be a false report with no threat to the community, negating any harm.
    10. absent: This states the call was determined to be a false report with no threat to the community, conveying that there was no actual danger or harm.
    11. absent: Explains a report was determined to be false with no threat to the community, conveying no harm or danger.
    12. absent: The message states it was determined to be a false report with no threat to the community, negating any harm.
    13. absent: The message determines the report was false with no threat to the community, so no actual harm or danger is conveyed.
    14. absent: Describes a false report with no shots heard and explicitly states there was no threat to the community.
    15. present: Explicitly states the report was false and there was no threat to the community, conveying no actual danger.
    16. absent: This describes a false report determined to pose no threat to the community, conveying no actual harm or danger.
    17. absent: It describes a report determined to be false with no threat to the community, so no actual harm or danger existed.
    18. present: The message explains the report was determined to be a false report with no threat to the community, explicitly stating the absence of danger.
    19. absent: It explains that a report of gunshots was determined to be a false report with no threat to the community.
    20. absent: States the report was a false report and there was no threat to the community, explicitly negating danger.
    21. absent: Describes a false report of gunshots determined to be no threat to the community so no harm is conveyed.
    22. present: Describes a report investigated and determined to be a false report with no threat to the community, so no danger is conveyed.
    23. absent: States the gunshot report was determined a false report with no threat to the community, conveying no harm.
    24. absent: The message explains a reported incident was determined to be a false report with no threat to the community, stating the absence of harm.
    25. absent: States a report was a false report with no threat to the community, conveying no actual danger.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

At 4:17 AM EDT on September 2, 2025, the University of Maryland Police Department was alerted to a report of an active shooter near McKeldin Library via Prince George's County Public Safety Communications. The caller reported a person with an AR-style weapon. However, a UMPD officer was already patrolling McKeldin Mall at that exact time and reported not seeing or hearing anything suspicious. The university's gunshot detection technology system also had not triggered, providing a second layer of counter-evidence. With assistance from allied agencies and the Security Operations Center, the call was quickly determined to be a false report. UMD was among the victims of an escalating wave of swatting targeting college campuses, with approximately 20 universities hit by similar hoaxes that week alone. By mid-September 2025, at least 45 colleges and universities had been victimized during the fall semester. The 4:17 AM EDT timing of the call minimized disruption, as few students were on campus.
Analysis

Key Findings

UMD's gunshot detection system and a patrolling officer provided immediate counter-evidence, enabling rapid confirmation of the false alarm
The 4:17 AM EDT timing minimized disruption but also meant fewer potential witnesses to corroborate or refute the report
UMD was one of approximately 20 universities targeted by swatting hoaxes in a single week during fall 2025
Outcome
The report was quickly determined to be a false alarm with help from allied agencies and the Security Operations Center. No evidence of gunfire, no weapon, no injuries. The incident was part of a nationwide wave of swatting targeting approximately 20 universities.
Provenance

Sources

  1. Student Paper
  2. News
  3. News
  4. News
  5. Source
Cite this case

Campus Alert Archive. "University of Maryland, College Park: Early-morning false report of a rifle near the main library; no evidence of gunfire found." Incident of September 2, 2025. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/university-of-maryland-swatting-2025-09-02/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingmarylandhoaxgunshot-detectionwave-of-threatspublic-universityovernight-incidentHoax
Added May 2026Updated July 2026Via ingestion