Skip to content
Campus Alert Archive
Pitt

Hoax rifle report at the law school; building cleared within about 20 minutes

AI-generated · every claim is source-linked
PAswattingemergency notificationhigh confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On August 28, 2024, a hoax caller reported a person with an AR-style rifle at the Barco Law Building on the University of Pittsburgh campus. Pitt ENS issued an alert at 12:28 PM EDT, and police cleared the building within 21 minutes. The incident was part of a nationwide wave of swatting attacks linked to the cybercriminal group Purgatory.

Alerts
2
Response
—
Killed
0
Injured
0
Institution
University of Pittsburgh
Public R1 · PA
All Pitt cases →
~34,000 studentsEmergency Notification Service (ENS)
Official alert policy
Read when and how Pitt says it will use Emergency Notification Service (ENS): summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTSMS
Verified verbatim146 chars
Pitt E.N.S. Alert: UPPD and City police on scene at Barco Law School for an unconfirmed report of an armed person. Avoid the area. pi.tt/emergency
Verbatim text from the Pitt Police Facebook archive of the ENS alert
The alert was sent at 12:28 PM EDT, approximately 8 minutes after the initial 911 call was received by Pittsburgh police
Students were evacuated from the building by law enforcement officers around 12:45 PM EDT
DEEP AUDIT correct 2026-08-02: full-page longer than archive (adds Avoid the area. pi.tt/emergency). Official @pittpolice.
ALL CLEARSMS+21 min
Verified verbatim87 chars
Police have cleared the Barco Law Building. No credible threat. Resume normal activity.
Verbatim text from the all-clear ENS alert posted at 12:49 PM EDT
The all-clear came 21 minutes after the initial alert. During the April 2023 Hillman Library swatting incident, by comparison, about 82 minutes elapsed between the first call and Pitt's first emergency notification
Police confirmed no weapon was found and no shots had been fired
Message elements

How the first alert is built

To check this alert, Claude Opus 5 (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

Pitt E.N.S. Alert: UPPD and City police on scene at Barco Law School for an unconfirmed report of an armed person. Avoid the area. pi.tt/emergency

  • Sourcepresent25/25

    Final assessment

    Present, unanimously. The message opens with the Pitt E.N.S. Alert tag and names UPPD and City police.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It opens "Pitt E.N.S. Alert" and names UPPD and City police.
    2. present: It opens "Pitt E.N.S. Alert" and names UPPD and City police.
    3. present: It opens with "Pitt E.N.S. Alert" and names UPPD and City police.
    4. present: It opens with "Pitt E.N.S. Alert" and names UPPD and city police.
    5. present: It opens "Pitt E.N.S. Alert" and names UPPD and City police.
    6. present: It opens with "Pitt E.N.S. Alert" and names UPPD and City police.
    7. present: The Pitt E.N.S. Alert tag plus UPPD and City police name the sender and responders.
    8. present: Branded Pitt E.N.S. Alert signature plus UPPD and City police identify the sender.
    9. present: It opens with "Pitt E.N.S. Alert" and names UPPD and city police.
    10. present: It opens with "Pitt E.N.S. Alert" and names UPPD and city police.
    11. present: It carries the Pitt E.N.S. Alert signature and names UPPD and City police.
    12. present: It opens with the branded "Pitt E.N.S. Alert" and names UPPD.
    13. present: It opens with "Pitt E.N.S. Alert" and names UPPD and City police.
    14. present: It opens "Pitt E.N.S. Alert" and names UPPD and city police.
    15. present: It opens "Pitt E.N.S. Alert" and names UPPD and city police.
    16. present: It opens with "Pitt E.N.S. Alert" and names UPPD and city police.
    17. present: It opens with "Pitt E.N.S. Alert" and names UPPD and City police.
    18. present: It opens "Pitt E.N.S. Alert" and names UPPD and city police.
    19. present: 'Pitt E.N.S. Alert' plus UPPD identifies the sender and responders.
    20. present: "Pitt E.N.S. Alert" plus UPPD identifies both the system and the agency.
    21. present: The branded tag "Pitt E.N.S. Alert" plus "UPPD and City police" identify the source.
    22. present: It opens "Pitt E.N.S. Alert" and names UPPD and city police.
    23. present: It opens with "Pitt E.N.S. Alert" and names UPPD and city police.
    24. present: It opens with "Pitt E.N.S. Alert" and names UPPD and City police.
    25. present: It opens with the branded tag "Pitt E.N.S. Alert" and names UPPD.
  • Hazardpresent25/25

    Final assessment

    Present, unanimously. An unconfirmed report of an armed person names the threat.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: An "unconfirmed report of an armed person" names the threat.
    2. present: It reports "an unconfirmed report of an armed person", a specific threat.
    3. present: It reports "an unconfirmed report of an armed person".
    4. present: It reports "an unconfirmed report of an armed person".
    5. present: It reports "an unconfirmed report of an armed person".
    6. present: It reports "an unconfirmed report of an armed person".
    7. present: An unconfirmed report of an armed person is a named threat.
    8. present: An unconfirmed report of an armed person names the threat.
    9. present: It reports "an unconfirmed report of an armed person".
    10. present: It reports "an unconfirmed report of an armed person".
    11. present: An unconfirmed report of an armed person names the threat.
    12. present: An "unconfirmed report of an armed person" names the threat.
    13. present: It reports "an unconfirmed report of an armed person".
    14. present: It reports "an unconfirmed report of an armed person".
    15. present: An "unconfirmed report of an armed person" names the threat.
    16. present: It reports "an unconfirmed report of an armed person".
    17. present: It reports "an unconfirmed report of an armed person".
    18. present: It reports "an unconfirmed report of an armed person".
    19. present: It reports 'an unconfirmed report of an armed person'.
    20. present: It reports "an unconfirmed report of an armed person", a specific threat.
    21. present: It reports "an unconfirmed report of an armed person".
    22. present: It reports "an unconfirmed report of an armed person".
    23. present: It reports "an unconfirmed report of an armed person".
    24. present: It reports "an unconfirmed report of an armed person".
    25. present: It reports an "unconfirmed report of an armed person".
  • Locationpresent25/25

    Final assessment

    Present, unanimously. The scene is given as Barco Law School.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: The scene is "Barco Law School".
    2. present: It locates the response "at Barco Law School".
    3. present: The scene is given as "Barco Law School".
    4. present: The scene is given as "Barco Law School".
    5. present: It places responders "at Barco Law School".
    6. present: The scene is given as "Barco Law School".
    7. present: Barco Law School is the stated location.
    8. present: It locates the scene at Barco Law School.
    9. present: It locates the response "at Barco Law School".
    10. present: It gives the location as "Barco Law School".
    11. present: The location given is Barco Law School.
    12. present: The scene is given as "Barco Law School".
    13. present: The location given is "Barco Law School".
    14. present: It places responders "at Barco Law School".
    15. present: The scene is given as Barco Law School.
    16. present: The scene is given as Barco Law School.
    17. present: It places responders "on scene at Barco Law School".
    18. present: The scene is given as "Barco Law School".
    19. present: It locates police 'on scene at Barco Law School'.
    20. present: The location given is "Barco Law School".
    21. present: It locates the response "at Barco Law School".
    22. present: The scene is given as "Barco Law School".
    23. present: The scene is "Barco Law School".
    24. present: It places responders "at Barco Law School".
    25. present: The scene is given as "Barco Law School".
  • Guidancepresent25/25

    Final assessment

    Present, unanimously. Recipients are told to avoid the area.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: "Avoid the area" is a protective instruction.
    2. present: Recipients are told to "Avoid the area".
    3. present: It tells recipients to "Avoid the area".
    4. present: It instructs recipients to "Avoid the area".
    5. present: It instructs recipients to "Avoid the area".
    6. present: "Avoid the area" instructs recipients directly.
    7. present: Avoid the area instructs recipients directly.
    8. present: It instructs recipients to avoid the area.
    9. present: It instructs recipients to "Avoid the area".
    10. present: It instructs recipients to "Avoid the area".
    11. present: Avoid the area instructs recipients on protective action.
    12. present: It tells recipients to "Avoid the area".
    13. present: It instructs recipients to "Avoid the area".
    14. present: It instructs recipients to "Avoid the area".
    15. present: "Avoid the area" instructs recipients directly.
    16. present: It tells recipients to "Avoid the area".
    17. present: It instructs recipients to "Avoid the area".
    18. present: It instructs recipients to "Avoid the area".
    19. present: It directs recipients to 'Avoid the area'.
    20. present: "Avoid the area" is a protective action for recipients.
    21. present: It instructs "Avoid the area".
    22. present: "Avoid the area" instructs recipients directly.
    23. present: "Avoid the area" instructs recipients directly.
    24. present: It instructs recipients to "Avoid the area".
    25. present: It tells recipients to "Avoid the area".
  • Timeabsent0/25

    Final assessment

    Absent, unanimously. No clock time, date, or recency word appears; on scene describes responders rather than timing.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date or recency word is present.
    2. absent: No time, date, or recency word appears; "on scene" describes responders, not timing.
    3. absent: No clock time, date, or explicit recency cue is included.
    4. absent: No clock time, date, or recency cue is included.
    5. absent: No clock time, date or recency word is present.
    6. absent: No time, date, or recency marker is given.
    7. absent: No clock time, date, or recency word is given.
    8. absent: No clock time, date or recency word is given.
    9. absent: No time, date, or recency word appears in the message.
    10. absent: No clock time, date, or explicit recency word appears.
    11. absent: No time, date or recency word appears in the message.
    12. absent: No clock time, date, or recency word is present.
    13. absent: No time, date, or recency word appears; "on scene" describes responders, not timing.
    14. absent: No clock time, date, or explicit recency word appears in the message.
    15. absent: No time, date, or recency word is included.
    16. absent: No time, date, or recency word is included.
    17. absent: No clock time, date, or explicit recency word appears.
    18. absent: No time, date, or recency term is present.
    19. absent: No clock time or explicit recency word is included.
    20. absent: No clock time, date or recency word appears.
    21. absent: No time, date, or recency word appears in the message.
    22. absent: No time, date, or recency word is present.
    23. absent: No time, date, or recency cue is given.
    24. absent: No time, date, or explicit recency word appears.
    25. absent: No clock time, date or recency word is included.
  • Impactabsent0/25

    Final assessment

    Absent, unanimously. No consequence or severity accompanies the report of an armed person.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: No consequence or severity statement accompanies the report.
    2. absent: No consequence or severity of the armed person is described.
    3. absent: No potential consequence or severity is described.
    4. absent: No possible consequence or severity is stated.
    5. absent: No consequence or severity statement accompanies the hazard.
    6. absent: No potential consequence or severity is stated.
    7. absent: No statement of potential harm or severity appears.
    8. absent: No severity or consequence is described.
    9. absent: No potential consequence or severity is stated.
    10. absent: No consequence or severity of the armed person is stated.
    11. absent: No potential harm or severity is conveyed beyond naming the armed person.
    12. absent: No consequence or severity of the reported threat is stated.
    13. absent: No consequence or severity of the armed person report is stated.
    14. absent: No consequence or severity statement accompanies the report.
    15. absent: No severity or possible consequence is described.
    16. absent: No potential harm or severity is stated.
    17. absent: No consequence or severity of the armed person report is stated.
    18. absent: No potential harm or severity is described.
    19. absent: No severity or consequence is described.
    20. absent: No statement of what harm could result.
    21. absent: No severity or consequence is described.
    22. absent: No potential harm or severity is conveyed.
    23. absent: No potential harm or severity is described.
    24. absent: No potential consequence or severity is stated.
    25. absent: No danger, injury or severity is described.

Coded by Claude Opus 5

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On August 28, 2024, Pittsburgh police received a call from someone claiming to be hiding in a closet at the Barco Law Building on Pitt's campus, reporting a person with an AR-style rifle and claiming to hear gunfire. Pitt ENS issued an alert at 12:28 PM EDT, approximately 8 minutes after the first report. University of Pittsburgh Police and City of Pittsburgh police responded immediately, and students were evacuated from the building around 12:45 PM EDT. By 12:49 PM EDT, police had cleared the building and confirmed no credible threat. The incident was part of a nationwide wave of swatting attacks that began on August 21 at Villanova University and the University of Tennessee at Chattanooga. A report by the Center for Internet Security and the Institute for Strategic Dialogue attributed the attacks to the cybercriminal group Purgatory, which used Google Voice services and played gunshot sounds during calls. In 2024 Pitt's initial alert went out about 8 minutes after the first call, and police cleared the building within 21 minutes. During a similar swatting incident at Hillman Library in April 2023, about 82 minutes elapsed between the first 911 call and Pitt's first emergency notification, prompting the university to review its notification system.
Analysis

Key Findings

Pitt's emergency notification went out about 8 minutes after the first call in 2024; during the April 2023 Hillman Library swatting incident, about 82 minutes elapsed between the first call and the first notification
The incident was attributed to the Purgatory swatting group, which targeted at least 10 U.S. universities in one week
The hoax caller fabricated detailed claims, including hiding in a closet, an AR-style rifle, and gunfire sounds
Outcome
Police determined the report was not credible within approximately 20 minutes. No weapon, no shooter, no injuries found. The incident was linked to the Purgatory swatting group, which targeted at least 10 U.S. universities between August 21 and 28, 2024.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. Student Paper
  2. Official
  3. Social
  4. News
  5. News
Cite this case

Campus Alert Archive. "University of Pittsburgh: Hoax rifle report at the law school; building cleared within about 20 minutes." Incident of August 28, 2024. Added May 2026; last updated August 2026. https://campusalertarchive.com/case/university-of-pittsburgh-swatting-2024-08-28/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingpennsylvaniapurgatory-grouphoaxlaw-schoolpublic-universityHoax
Added May 2026Updated August 2026Via ingestion