Skip to content
Campus Alert Archive
Pitt

Hoax rifle report at the law school; building cleared within about 20 minutes

AI-generated · every claim is source-linked
PAswattingemergency notificationhigh confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On August 28, 2024, a hoax caller reported a person with an AR-style rifle at the Barco Law Building on the University of Pittsburgh campus. Pitt ENS issued an alert at 12:28 PM EDT, and police cleared the building within 21 minutes. The incident was part of a nationwide wave of swatting attacks linked to the cybercriminal group Purgatory.

Alerts
2
Response
Killed
0
Injured
0
Institution
University of Pittsburgh
Public R1 · PA
All Pitt cases →
~34,000 studentsEmergency Notification Service (ENS)
Official alert policy
Read when and how Pitt says it will use Emergency Notification Service (ENS): summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

INITIAL ALERTSMS
Pitt E.N.S. Alert: UPPD and City police on scene at Barco Law School for an unconfirmed report of an armed person.
Verbatim text from the Pitt Police Facebook archive of the ENS alert
The alert was sent at 12:28 PM EDT, approximately 8 minutes after the initial 911 call was received by Pittsburgh police
Students were evacuated from the building by law enforcement officers around 12:45 PM EDT
ALL CLEARSMS+21 min
Police have cleared the Barco Law Building. No credible threat. Resume normal activity.
Verbatim text from the all-clear ENS alert posted at 12:49 PM EDT
The all-clear came 21 minutes after the initial alert. During the April 2023 Hillman Library swatting incident, by comparison, about 82 minutes elapsed between the first call and Pitt's first emergency notification
Police confirmed no weapon was found and no shots had been fired
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

Pitt E.N.S. Alert: UPPD and City police on scene at Barco Law School for an unconfirmed report of an armed person.

  • Sourcepresent25/25

    Final assessment

    Unanimous that the source is present, identifying the issuing authority.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Opens with branded signature "Pitt E.N.S. Alert" and names "UPPD".
    2. present: Opens with branded signature "Pitt E.N.S. Alert" and names "UPPD and City police".
    3. present: Opens "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    4. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police" as responders.
    5. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police on scene".
    6. present: Branded "Pitt E.N.S. Alert" with "UPPD and City police on scene".
    7. present: Opens "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    8. present: Opens with "Pitt E.N.S. Alert" and names "UPPD", identifying sender and authority.
    9. present: Opens with branded signature "Pitt E.N.S. Alert" and names "UPPD and City police".
    10. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police on scene".
    11. present: Branded signature "Pitt E.N.S. Alert" plus "UPPD and City police on scene".
    12. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police".
    13. present: Opens with the branded signature "Pitt E.N.S. Alert" and names "UPPD".
    14. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    15. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    16. present: Opens with branded signature "Pitt E.N.S. Alert" and names "UPPD and City police".
    17. present: Opens with branded "Pitt E.N.S. Alert" and names "UPPD and City police".
    18. present: Opens with "Pitt E.N.S. Alert" and notes "UPPD and City police on scene".
    19. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying sender and authority.
    20. present: Opens with branded "Pitt E.N.S. Alert" and names "UPPD and City police".
    21. present: Opens with branded signature "Pitt E.N.S. Alert" and names "UPPD and City police".
    22. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police".
    23. present: The message opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    24. present: It opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
    25. present: Opens with "Pitt E.N.S. Alert" and names "UPPD and City police", identifying the sender.
  • Hazardpresent25/25

    Final assessment

    All 25 reads agree the hazard is stated for this swatting incident.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: Names the specific hazard "an unconfirmed report of an armed person".
    2. present: Names the hazard, "an unconfirmed report of an armed person".
    3. present: It names "an armed person", a specific threat.
    4. present: It names "an unconfirmed report of an armed person", a specific threat.
    5. present: Names "an unconfirmed report of an armed person", a specific threat.
    6. present: Names the threat "an unconfirmed report of an armed person".
    7. present: Names "an unconfirmed report of an armed person", a specific threat.
    8. present: Names "an unconfirmed report of an armed person", a specific threat.
    9. present: Names the specific hazard "an unconfirmed report of an armed person".
    10. present: Names the specific threat, "an unconfirmed report of an armed person".
    11. present: Names the threat "an unconfirmed report of an armed person".
    12. present: Names the hazard as "an unconfirmed report of an armed person".
    13. present: Names the specific hazard "an unconfirmed report of an armed person".
    14. present: Names the hazard as "an armed person", though unconfirmed.
    15. present: Names the hazard as a report of "an armed person".
    16. present: Names the hazard as "an unconfirmed report of an armed person".
    17. present: Names the threat as "an unconfirmed report of an armed person".
    18. present: Names "an unconfirmed report of an armed person", a specific threat.
    19. present: Names "an unconfirmed report of an armed person", a specific threat.
    20. present: Names the specific hazard, "an unconfirmed report of an armed person".
    21. present: Names the hazard as "an unconfirmed report of an armed person".
    22. present: Names "an unconfirmed report of an armed person", a specific threat.
    23. present: It names a specific threat, "an armed person".
    24. present: It names "an unconfirmed report of an armed person", a specific threat.
    25. present: Names the hazard, "an unconfirmed report of an armed person".
  • Locationpresent25/25

    Final assessment

    Unanimous that a specific location is named.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Specifies the location "Barco Law School".
    2. present: Gives location, "at Barco Law School".
    3. present: It locates it "at Barco Law School", a specific building.
    4. present: It specifies "Barco Law School" as the location.
    5. present: Specifies "Barco Law School", a specific building.
    6. present: Specifies "Barco Law School".
    7. present: Specifies "Barco Law School".
    8. present: Specifies "Barco Law School", a building.
    9. present: Specifies the location "Barco Law School".
    10. present: Specifies "Barco Law School".
    11. present: Locates it "at Barco Law School".
    12. present: Locates it at "Barco Law School".
    13. present: Specifies "Barco Law School".
    14. present: Specifies "Barco Law School", a named building.
    15. present: Locates it "at Barco Law School".
    16. present: States location: "Barco Law School".
    17. present: Gives location "Barco Law School".
    18. present: Specifies "Barco Law School", a named building.
    19. present: Locates it "at Barco Law School", a specific building.
    20. present: Specifies the location "at Barco Law School".
    21. present: Locates it "at Barco Law School".
    22. present: Specifies "Barco Law School", a named place.
    23. present: It locates it "at Barco Law School".
    24. present: It specifies "Barco Law School", a named building.
    25. present: States the location, "Barco Law School".
  • Guidanceabsent0/25

    Final assessment

    All 25 reads find no protective action directed to recipients, so guidance is absent.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. absent: No protective action is directed to recipients; it only states police are on scene.
    2. absent: No protective action is directed at recipients, only that police are on scene.
    3. absent: It says police are on scene but gives recipients no protective instruction.
    4. absent: It only states police are on scene; no protective action is directed to recipients.
    5. absent: Reports police on scene but gives recipients no protective instruction.
    6. absent: No protective action is directed to recipients; only describes police on scene.
    7. absent: Describes police on scene but gives recipients no protective action instruction.
    8. absent: States police are on scene but gives recipients no protective instruction.
    9. absent: States police are on scene but gives no protective action instruction to recipients.
    10. absent: It reports police are on scene but directs no protective action to recipients.
    11. absent: Reports police on scene but gives recipients no protective action.
    12. absent: States police are on scene but gives no protective instruction to recipients.
    13. absent: Describes police on scene but gives no protective action instruction to recipients.
    14. absent: Describes police on scene but gives recipients no protective action instruction.
    15. absent: No protective action instruction is given to recipients in the text.
    16. absent: Reports police are "on scene" but gives recipients no protective action.
    17. absent: No protective action is instructed to recipients; it only states police are on scene.
    18. absent: Describes police on scene but gives no protective action to recipients.
    19. absent: States police are on scene but gives recipients no protective action to take.
    20. absent: States police are "on scene" but gives recipients no protective instruction.
    21. absent: No protective action is directed to recipients; it only says police are on scene.
    22. absent: Says police are on scene but gives no protective instruction to recipients.
    23. absent: It only reports police are on scene; no protective action is instructed to recipients.
    24. absent: It describes police on scene but gives recipients no protective action instruction.
    25. absent: The text reports police are on scene but gives no protective action to recipients.
  • Timeabsent3/25

    Final assessment

    The strong majority finds no clock time, date, or recency cue; a few counted police on scene, which is weak.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears in the text.
    2. absent: No clock time, date, or recency cue appears in the text.
    3. absent: No clock time, date, or recency cue such as "now" appears in the text.
    4. absent: No clock time, date, or recency word appears in the text.
    5. absent: No clock time, date, or recency cue such as "now" appears.
    6. absent: No clock time, date, or recency word appears in the text.
    7. absent: No clock time, date, or recency word like "now" appears.
    8. absent: No clock time, date, or recency cue is given in the text.
    9. absent: No clock time, date, or recency word like "now" appears in the text.
    10. present: Says police are "on scene", a present-tense recency cue.
    11. absent: No clock time, date, or recency cue appears in the text.
    12. absent: No clock time, date, or recency word appears.
    13. absent: No clock time, date, or recency cue appears in the text.
    14. absent: No clock time, date, or recency cue appears in the text.
    15. absent: No clock time, date, or recency word appears in the text.
    16. absent: No clock time, date, or recency cue is given in the text.
    17. present: Conveys recency: police are "on scene", a current ongoing condition.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency word like "now" appears in the text.
    20. absent: No clock time, date, or recency word like "now" appears in the text.
    21. absent: No clock time, date, or recency word appears in the text.
    22. absent: No clock time, date, or recency word appears in the text.
    23. absent: No clock time, date, or recency cue such as "now" appears in the text.
    24. present: It says police are "on scene", conveying current recency.
    25. absent: No clock time, date, or recency word like "now" appears in the text.
  • Impactpresent13/25

    Final assessment

    Present by a narrow 13 to 12 split; a slim majority finds the report of an armed person with police on scene implies potential lethal danger, while nearly half note it is unconfirmed with no stated harm or severity.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: Reports an unconfirmed report of an armed person with police on scene, implying potential lethal danger.
    2. present: Reports an unconfirmed report of an armed person with police on scene, implying potential danger to people.
    3. absent: Reports an unconfirmed report of an armed person with police on scene but states no explicit harm or confirmed danger.
    4. present: It reports police on scene for an unconfirmed report of an armed person, conveying a potential weapon-based danger.
    5. absent: It reports police on scene for an unconfirmed report of an armed person without stating any danger or harm.
    6. present: Reports police on scene for a report of an armed person, conveying a weapon-based potential danger.
    7. absent: It reports police on scene for an unconfirmed report of an armed person but names the hazard without stating harm or severity.
    8. present: Reports police on scene for an unconfirmed report of an armed person, implying a potential lethal danger.
    9. present: Reports police on scene for an unconfirmed report of an armed person, the weapon implying potential danger.
    10. absent: This reports police on scene for an unconfirmed report of an armed person but states no harm or confirmed danger.
    11. absent: Reports police on scene for an unconfirmed report of an armed person but states no explicit harm or danger.
    12. present: The alert reports police on scene for an unconfirmed report of an armed person, implying a potential threat of violence.
    13. present: The alert reports police on scene for a report of an armed person, which implies a weapon threat to people.
    14. absent: Reports police on scene for an unconfirmed report of an armed person but states no harm or explicit danger.
    15. absent: Reports an unconfirmed report of an armed person with police on scene but states no harm or stated danger.
    16. present: The alert reports police on scene for an unconfirmed report of an armed person, the potential weapon conveying danger to people.
    17. absent: It reports police on scene for an unconfirmed report of an armed person but states no consequence or harm.
    18. absent: The alert reports police on scene for an unconfirmed report of an armed person but states no harm or consequence beyond naming the hazard.
    19. present: It reports police on scene for an unconfirmed report of an armed person, with the stated weapon conveying potential lethal danger.
    20. present: Reports an unconfirmed report of an armed person with police on scene, implying weapon danger.
    21. absent: Reports an unconfirmed report of an armed person with police on scene but states no explicit harm or danger.
    22. absent: Reports police on scene for an unconfirmed report of an armed person but names the hazard without stating what harm it could do.
    23. absent: Reports an unconfirmed report of an armed person with police on scene but states no specific harm or danger.
    24. present: The alert reports police on scene for an unconfirmed report of an armed person, implying a possible threat of deadly force.
    25. present: Reports police on scene for an unconfirmed report of an armed person, conveying a potential weapon-based threat.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On August 28, 2024, Pittsburgh police received a call from someone claiming to be hiding in a closet at the Barco Law Building on Pitt's campus, reporting a person with an AR-style rifle and claiming to hear gunfire. Pitt ENS issued an alert at 12:28 PM EDT, approximately 8 minutes after the first report. University of Pittsburgh Police and City of Pittsburgh police responded immediately, and students were evacuated from the building around 12:45 PM EDT. By 12:49 PM EDT, police had cleared the building and confirmed no credible threat. The incident was part of a nationwide wave of swatting attacks that began on August 21 at Villanova University and the University of Tennessee at Chattanooga. A report by the Center for Internet Security and the Institute for Strategic Dialogue attributed the attacks to the cybercriminal group Purgatory, which used Google Voice services and played gunshot sounds during calls. In 2024 Pitt's initial alert went out about 8 minutes after the first call, and police cleared the building within 21 minutes. During a similar swatting incident at Hillman Library in April 2023, about 82 minutes elapsed between the first 911 call and Pitt's first emergency notification, prompting the university to review its notification system.
Analysis

Key Findings

Pitt's emergency notification went out about 8 minutes after the first call in 2024; during the April 2023 Hillman Library swatting incident, about 82 minutes elapsed between the first call and the first notification
The incident was attributed to the Purgatory swatting group, which targeted at least 10 U.S. universities in one week
The hoax caller fabricated detailed claims, including hiding in a closet, an AR-style rifle, and gunfire sounds
Outcome
Police determined the report was not credible within approximately 20 minutes. No weapon, no shooter, no injuries found. The incident was linked to the Purgatory swatting group, which targeted at least 10 U.S. universities between August 21 and 28, 2024.
Provenance

Sources

  1. Student Paper
  2. Official
  3. Social
  4. News
  5. News
Cite this case

Campus Alert Archive. "University of Pittsburgh: Hoax rifle report at the law school; building cleared within about 20 minutes." Incident of August 28, 2024. Added May 2026. https://campusalertarchive.com/case/university-of-pittsburgh-swatting-2024-08-28/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingpennsylvaniapurgatory-grouphoaxlaw-schoolpublic-universityHoax
Added May 2026Updated May 2026Via ingestion