Skip to content
Campus Alert Archive
TU

Armed threat against student union staff prompts evacuation; two suspects arrested

AI-generated · every claim is source-linked
OKthreat of violenceemergency notificationmedium confidence
Confirmed Threat

On February 23, 2024, an employee of an on-campus restaurant in the Allan Chapman Student Union sent coworkers a photo of himself holding a rifle, threatening to come and harm staff. The university evacuated the Student Union and sent a text alert at 4:07 PM CST. Two 19-year-olds were arrested at their home where police found two AR-15s, a Glock 23, and a high-capacity drum magazine.

Alerts
4
Response
Killed
Injured
Institution
University of Tulsa
Private R2 · OK
All TU cases →
~3,600 studentsUTulsa Alert
Documented Timeline

Alert Sequence

4 messages in sequence · 3 verified verbatim

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTSMS
Verified verbatimTU text alert quoted verbatim by News On 6122 chars
ACSU is being evacuated. An emergency situation has been reported; authorities are investigating. Stay away from the area.
Sent at 4:07 PM CST on February 23, 2024 according to News On 6 reporting
ACSU refers to the Allan Chapman Student Union, the central student gathering space on the TU campus, the alert assumes student familiarity with the abbreviation rather than spelling it out
The brief 'authorities are investigating' framing does not mention the rifle-photo threat that had triggered the evacuation
UPDATESMS+41 min
Verified verbatimTU text alert quoted verbatim by News On 680 chars
The situation is still ongoing at the Student Union. Continue to avoid the area.
Sent at 4:48 PM CST (41 minutes after the initial alert) without offering any new substantive information
The update repeats the avoidance instruction without new substantive information while the investigation continued
UPDATESMS+1h 19m
Verified verbatimTU text alert quoted verbatim by News On 6130 chars
The situation is still ongoing at the Student Union. Continue to avoid the area. The Student Union will be closed for the evening.
Sent at 5:26 PM CST, the third TU text in 79 minutes
First operational decision communicated: the Student Union would remain closed for the evening, a signal that the investigation would extend beyond a quick resolution
Michael Johnson and Marshon Duckett, both 19, were arrested later that evening at their home where police seized two AR-15s, a Glock 23, and a high-capacity drum magazine
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

ACSU is being evacuated. An emergency situation has been reported; authorities are investigating. Stay away from the area.

  • Sourceabsent4/25

    Final assessment

    Most reads find the source absent, with no sender tag or university name; a few infer it from the reference to authorities investigating.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. absent: No sender tag, agency, or university name appears in the text.
    2. absent: No sender tag, university name, or agency is identified in the text.
    3. present: Says "authorities are investigating" and writes from the issuing institution about its building.
    4. present: It references "authorities" investigating, a responding authority.
    5. absent: No branded signature, university self-naming, or named agency appears; only "authorities" generically.
    6. present: It refers to "authorities" investigating, a responding authority.
    7. present: It says "authorities are investigating" and references the "ACSU" building evacuation, an authority reference.
    8. absent: The text names no sender tag, institution, or agency; only "authorities" generically.
    9. absent: No branded signature, agency, or institution names itself as sender.
    10. absent: No branded signature, sender tag, university name, or agency is identified in the text.
    11. absent: The text has no branded signature, self-naming, or named agency beyond "authorities".
    12. absent: No sender tag, agency name, or institution name appears in the text.
    13. absent: No sender tag, agency, or institution name appears in the text.
    14. absent: No branded signature, university name, or agency is identified in the text.
    15. absent: The text has no branded signature, university self-naming, or named agency; "authorities" alone is generic.
    16. absent: No sender, branded signature, or named authority appears; "authorities" is generic.
    17. absent: No sender signature, agency, or institution names itself in the text.
    18. absent: No branded signature, university name, or agency is named, only "authorities" generically.
    19. absent: No branded signature, university name, or agency identifies the sender in the text.
    20. absent: No branded signature, university name, or agency is identified in the text.
    21. absent: No branded signature, university name, or named agency appears; only "authorities" generically.
    22. absent: The text gives no sender tag, institution name, or named agency, only "authorities".
    23. absent: No sender, alert brand, university name, or agency is identified in the text.
    24. absent: It says "authorities are investigating" but names no specific sender, tag, or agency.
    25. absent: The text has no branded signature, university self-naming, or named agency beyond generic "authorities".
  • Hazardabsent0/25

    Final assessment

    Unanimous that the hazard is absent; the alert names only an emergency situation without a specific hazard.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: Says only "An emergency situation", which is generic and names no specific hazard.
    2. absent: It names only "An emergency situation", which does not name a specific hazard.
    3. absent: Says "An emergency situation has been reported", generic wording that names no specific hazard.
    4. absent: It says only "An emergency situation", which does not name a specific hazard.
    5. absent: Says "An emergency situation has been reported", generic wording that names no specific hazard.
    6. absent: It says "An emergency situation has been reported", a generic phrase naming no hazard.
    7. absent: It cites only "An emergency situation", generic wording naming no specific hazard.
    8. absent: Says only "An emergency situation has been reported"; no specific hazard is named.
    9. absent: Says only "An emergency situation" generically, naming no specific hazard.
    10. absent: It names only "An emergency situation", a generic word that does not name a hazard.
    11. absent: It says only "An emergency situation", a generic word naming no hazard.
    12. absent: Says only "An emergency situation has been reported"; no specific hazard is named.
    13. absent: Says only "An emergency situation has been reported"; generic words name no specific hazard.
    14. absent: It cites only "An emergency situation", a generic phrase naming no specific hazard.
    15. absent: It cites only "An emergency situation", a generic phrase naming no specific hazard.
    16. absent: Says only "An emergency situation has been reported" without naming a specific hazard.
    17. absent: It says only "An emergency situation has been reported" without naming a hazard.
    18. absent: It states only "An emergency situation has been reported", a generic word naming no specific hazard.
    19. absent: It says only "An emergency situation has been reported" without naming a hazard.
    20. absent: It says only "An emergency situation has been reported" without naming a specific hazard.
    21. absent: Refers to "An emergency situation" without naming a specific hazard.
    22. absent: Says only "An emergency situation", a generic term naming no hazard.
    23. absent: It cites "An emergency situation" but does not name a specific hazard.
    24. absent: It says only "An emergency situation", which does not name a specific hazard.
    25. absent: It cites only "An emergency situation", which does not name a specific hazard.
  • Locationpresent25/25

    Final assessment

    All 25 reads agree a location is given, the ACSU building being evacuated and the area.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Names "ACSU" being evacuated and "the area".
    2. present: It says "ACSU is being evacuated" and "the area", a location reference.
    3. present: Specifies "ACSU", a named building location.
    4. present: It cites "ACSU is being evacuated" and "the area", specific places.
    5. present: Says "ACSU is being evacuated" and "the area", naming a specific building.
    6. present: It says "ACSU is being evacuated", a specific building reference.
    7. present: It specifies "ACSU" and "the area", specific location references.
    8. present: Says "ACSU is being evacuated" and "the area", a location cue.
    9. present: Locates it at "ACSU" being evacuated and "the area".
    10. present: It says "ACSU is being evacuated", naming a specific building.
    11. present: It says "ACSU is being evacuated" and "the area".
    12. present: Names the building "ACSU" being evacuated and "the area".
    13. present: Says "ACSU is being evacuated" and "the area", location references.
    14. present: It locates it at "ACSU" being evacuated and "the area".
    15. present: It says "ACSU is being evacuated" and "the area", a location reference.
    16. present: Says "ACSU is being evacuated", naming a specific building.
    17. present: It says "ACSU is being evacuated" and "Stay away from the area", naming a building.
    18. present: It locates it as "ACSU is being evacuated" and "the area".
    19. present: It says "ACSU is being evacuated" and to "Stay away from the area".
    20. present: It says "ACSU is being evacuated" and "Stay away from the area", referencing a place.
    21. present: Says "ACSU is being evacuated" and "the area", a location cue.
    22. present: Specifies "ACSU" being evacuated and "the area".
    23. present: It names "ACSU" being evacuated and "the area".
    24. present: It names "ACSU" and "the area", specific places.
    25. present: It locates it at "ACSU" and "the area".
  • Guidancepresent25/25

    Final assessment

    Unanimous that guidance is present; recipients are told to stay away from the area.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs recipients to "Stay away from the area".
    2. present: It instructs recipients to "Stay away from the area".
    3. present: Instructs recipients to "Stay away from the area".
    4. present: It instructs "Stay away from the area", a protective action.
    5. present: Instructs recipients to "Stay away from the area".
    6. present: It instructs "Stay away from the area".
    7. present: It instructs "Stay away from the area", a protective action.
    8. present: Instructs "Stay away from the area", a protective action.
    9. present: Instructs to "Stay away from the area".
    10. present: It instructs recipients to "Stay away from the area".
    11. present: It instructs recipients to "Stay away from the area".
    12. present: Instructs recipients to "Stay away from the area".
    13. present: Instructs to "Stay away from the area", a protective action.
    14. present: It instructs recipients to "Stay away from the area".
    15. present: It instructs recipients to "Stay away from the area", a protective action.
    16. present: Instructs recipients to "Stay away from the area".
    17. present: It instructs "Stay away from the area".
    18. present: It instructs recipients to "Stay away from the area".
    19. present: It instructs recipients to "Stay away from the area".
    20. present: It instructs "Stay away from the area", a protective action.
    21. present: Instructs recipients to "Stay away from the area".
    22. present: Instructs recipients to "Stay away from the area".
    23. present: It instructs recipients to "Stay away from the area".
    24. present: It instructs recipients to "Stay away from the area".
    25. present: It instructs recipients to "Stay away from the area".
  • Timeabsent1/25

    Final assessment

    Most reads find time absent; one counts the present-tense being evacuated and are investigating as a recency cue.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears in the text.
    2. absent: No clock time, date, or recency word appears in the text.
    3. absent: No clock time, date, or recency cue such as "now" appears.
    4. absent: No clock time, date, or recency cue is present in the text.
    5. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    6. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    7. absent: No clock time, date, or recency cue such as "now" appears in the text.
    8. absent: No clock time, date, or recency word such as "now" appears in the text.
    9. absent: No clock time, date, or recency cue appears.
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears in the text.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency word appears in the text.
    14. absent: No clock time, date, or recency word appears in the text.
    15. absent: No clock time, date, or recency cue such as "now" appears in the text.
    16. absent: No clock time, date, or recency cue appears in the text.
    17. absent: No clock time, date, or recency cue appears in the text.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    20. absent: No clock time, date, or recency cue such as "now" appears in the text.
    21. absent: No clock time, date, or recency word like "now" appears in the text.
    22. absent: No clock time, date, or recency cue appears in the text.
    23. absent: No clock time, date, or recency cue appears in the text.
    24. absent: No clock time, date, or recency cue appears in the text.
    25. present: It says authorities "are investigating" and ACSU "is being evacuated", a present-tense recency cue.
  • Impactabsent7/25

    Final assessment

    Absent by an 18 to 7 majority; most reads find a building evacuation for an unspecified emergency under investigation states no specific harm or severity, while a minority reads the evacuation as implying danger.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: Reports a building being evacuated for an emergency situation under investigation but states no specific harm or danger.
    2. absent: States a building is being evacuated for an emergency situation under investigation but gives no specific harm or danger.
    3. absent: States a building is being evacuated for a reported emergency under investigation but states no explicit harm or stated danger.
    4. absent: It reports a building being evacuated for an emergency situation under investigation but states no explicit harm or stated danger.
    5. present: It reports a building evacuated for an emergency situation and to stay away, implying a danger to people.
    6. present: States an emergency situation prompting building evacuation, conveying a danger requiring people to flee.
    7. absent: It reports a building evacuation and an emergency situation under investigation but states no specific harm or danger severity.
    8. absent: States a building is being evacuated for a reported emergency under investigation but gives no harm or specific danger.
    9. absent: States a building is being evacuated for an emergency situation under investigation but states no explicit harm or danger.
    10. absent: This states a building is being evacuated for an emergency situation under investigation and tells people to stay away but describes no harm or explicit danger.
    11. absent: Reports a building evacuation for an emergency situation being investigated but states no explicit harm or danger.
    12. present: The alert describes a building evacuation due to a reported emergency situation under investigation, implying danger.
    13. absent: The alert reports an emergency situation under investigation and tells people to stay away but states no specific danger, weapon, or potential harm.
    14. absent: Reports a building evacuation for an emergency situation being investigated but states no explicit danger or harm.
    15. present: States an emergency situation has been reported and a building is being evacuated, conveying a danger requiring evacuation.
    16. absent: The alert says a building is being evacuated for an emergency situation under investigation and to stay away but states no harm or explicit danger.
    17. absent: It states a building is being evacuated for an emergency under investigation but states no specific harm or danger.
    18. present: The message reports a building being evacuated for an emergency situation and directs people to stay away, conveying an implied danger requiring evacuation; severity is marginal but evacuation order implies hazard.
    19. present: It reports a building being evacuated for a reported emergency situation, with the urgent evacuation implying serious danger though the hazard is unspecified.
    20. absent: Reports a building being evacuated for an emergency situation and to stay away but states no specific harm or danger.
    21. absent: Reports an evacuation over a reported emergency under investigation but states no explicit harm or danger severity.
    22. absent: Reports a building evacuation for an unspecified emergency situation and to stay away, with no stated harm or specific hazard.
    23. absent: Reports a building evacuation for an emergency under investigation but states no specific harm or danger.
    24. absent: The alert says a building is being evacuated for an emergency situation under investigation and tells people to stay away but does not state the harm or severity.
    25. present: Reports a building being evacuated due to an emergency situation under investigation, implying danger.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On February 23, 2024, an employee of a restaurant in the Allan Chapman Student Union at the University of Tulsa sent coworkers a photo of himself holding a rifle, threatening to come to the Student Union and harm staff. The university evacuated the ACSU and sent a text alert at 4:07 PM CST. Tulsa World reported that two 19-year-olds (Michael Johnson and Marshon Duckett) were arrested at their home, where police seized two AR-15 rifles, a Glock 23 handgun, and a high-capacity drum magazine. KJRH provided additional Tulsa-market coverage. No shots were fired and no injuries occurred.
Analysis

Key Findings

Police seized two AR-15 rifles, a Glock 23 handgun, and a high-capacity drum magazine from the suspects' home; no shots were fired
The threat came from a non-student employee of an on-campus restaurant, highlighting security considerations for third-party vendors
The photo-with-rifle threat delivery method via coworker text messages represents a modern threat vector
Outcome
Michael Johnson and Marshon Duckett, both 19, were arrested at their home. Police seized two AR-15 rifles, a Glock 23 handgun, and a high-capacity drum magazine. No shots were fired and no one was injured.
Provenance

Sources

  1. News
  2. News
  3. News
  4. News
Cite this case

Campus Alert Archive. "University of Tulsa: Armed threat against student union staff prompts evacuation; two suspects arrested." Incident of February 23, 2024. Added April 2026; last updated July 2026. https://campusalertarchive.com/case/university-of-tulsa-threat-2024-02-23/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
threat-of-violenceemployee-threatstudent-unionoklahomaar-15weapons-seizedprevented-attackphoto-threatprivate-university
Added April 2026Updated July 2026Via ingestion