Campus Alert Archive
U of U

Swatting emails targeting selected campus offices

AI-generated · every claim is source-linked
UTswattingadvisoryhigh confidence
Compare →
Under Investigation

The University of Utah posted a Campus Advisory that DPS was monitoring threatening emails to campus offices and believed the incident to be swatting.

Alerts
1
Response
—
Killed
—
Injured
—
Institution
University of Utah
Public R1 · UT
All U of U cases →
~35,000 studentsCampus Alert
Official alert policy
Read when and how U of U says it will use Campus Alert (alert.utah.edu): summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

1 message in sequence · 1 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTWebsite
Verified verbatim842 chars
U of U CAMPUS ALERT – Campus  Advisory (SLC campus) – Swatting incident affecting selected campus offices The University of Utah Department of Public Safety is monitoring multiple threatening emails sent overnight to campus offices by what appears to be a single individual. Police are investigating and working to identify the source but believe this to be a case of swatting. Swatting is a hazardous form of harassment where a false report or threat is targeted at a specific individual, organization, or location. These hoaxes cause considerable disruption. If you or your office receive emails with disturbing or violent imagery, please forward them to uupd-tips@utah.edu. Call 911 if you are in an urgent situation. You may also call 801-585-2677 for non-emergency concerns. Please stay informed through official University channels.
Verify this quote
University of Utah Campus Alert live advisoryalert.utah.edufind archived copies
Dual independent HTML fetch 2026-09-20 (web_fetch + curl) from alert.utah.edu. Product is the strong-line plus four body paragraphs; the h2 page title and date stamp are page chrome and were not captured. sha256 6da5cb9fafe22acf72c0803a377df344361ee5a7b974854b23b1e56c14ff680e. Official en-dashes, NBSP after Campus, and NBSP before Call 911 preserved.
Distinct incident from 2025-11-12-university-of-utah-swatting: different date and email-to-offices vs the November 2025 swatting case.
Message elements

How the first alert is built

To check this alert, SuperGrok Heavy 4.5 (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

U of U CAMPUS ALERT – Campus  Advisory (SLC campus) – Swatting incident affecting selected campus offices The University of Utah Department of Public Safety is monitoring multiple threatening emails sent overnight to campus offices by what appears to be a single individual. Police are investigating and working to identify the source but believe this to be a case of swatting. Swatting is a hazardous form of harassment where a false report or threat is targeted at a specific individual, organization, or location. These hoaxes cause considerable disruption. If you or your office receive emails with disturbing or violent imagery, please forward them to uupd-tips@utah.edu. Call 911 if you are in an urgent situation. You may also call 801-585-2677 for non-emergency concerns. Please stay informed through official University channels.

  • Sourcepresent25/25

    Final assessment

    All 25 reads find Source present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the sender.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: The branded header U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the source.
    2. present: The branded U of U CAMPUS ALERT and University of Utah Department of Public Safety identify the source.
    3. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the source.
    4. present: "U of U CAMPUS ALERT" and the University of Utah Department of Public Safety identify the source.
    5. present: "U of U CAMPUS ALERT" and the University of Utah Department of Public Safety identify the source.
    6. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the source.
    7. present: "U of U CAMPUS ALERT" and the "University of Utah Department of Public Safety" identify the sender.
    8. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the source.
    9. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the source.
    10. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the issuer.
    11. present: "U of U CAMPUS ALERT" and the "University of Utah Department of Public Safety" name the sender.
    12. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the sender.
    13. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the source.
    14. present: "U of U CAMPUS ALERT" and the "University of Utah Department of Public Safety" name the issuer.
    15. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the source.
    16. present: "U of U CAMPUS ALERT" and the "University of Utah Department of Public Safety" name the sender.
    17. present: U of U CAMPUS ALERT and University of Utah Department of Public Safety name the sender.
    18. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the sender and authority.
    19. present: "U of U CAMPUS ALERT" is a branded sender tag, and the University of Utah Department of Public Safety is named.
    20. present: "U of U CAMPUS ALERT" and the University of Utah Department of Public Safety name the source.
    21. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety identify the sender.
    22. present: "U of U CAMPUS ALERT" and the University of Utah Department of Public Safety name the source.
    23. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the sender and authority.
    24. present: U of U CAMPUS ALERT and the University of Utah Department of Public Safety name the issuing authority.
    25. present: "U of U CAMPUS ALERT" and "University of Utah Department of Public Safety" identify the sender.
  • Hazardpresent25/25

    Final assessment

    All 25 reads find Hazard present because the text names a swatting incident and threatening emails as the specific threat.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: It names a swatting incident and threatening emails, a specific threat type.
    2. present: It names a Swatting incident and threatening emails, a specific threat.
    3. present: The hazard is a swatting incident involving threatening emails and a false report.
    4. present: It names a "Swatting incident" and threatening emails, a specific threat.
    5. present: It names a swatting incident and threatening emails as the specific threat.
    6. present: It names swatting and threatening emails as the specific threat.
    7. present: It names a "Swatting incident" and threatening emails as the specific threat.
    8. present: The text names a swatting incident and threatening emails as the threat.
    9. present: It names a swatting incident and threatening emails as the specific threat.
    10. present: The text names a swatting incident and threatening emails as the specific threat.
    11. present: It identifies "swatting" and "threatening emails" as the specific threat.
    12. present: It identifies a swatting incident and threatening emails as the specific threat.
    13. present: The message identifies a swatting incident and threatening emails as the hazard.
    14. present: It identifies a "Swatting incident" and "threatening emails", a specific hazard type.
    15. present: It names a swatting incident and threatening emails as the specific threat.
    16. present: It identifies a "Swatting incident" and "threatening emails" as the hazard.
    17. present: It identifies a swatting incident and threatening emails as the hazard.
    18. present: The text identifies a swatting incident and threatening emails as the specific threat.
    19. present: The threat is named as a "Swatting incident" involving threatening emails and a false report.
    20. present: The threat is named as a swatting incident involving threatening emails.
    21. present: It names a swatting incident involving threatening emails and a false report.
    22. present: It specifies a swatting incident involving threatening emails and a false report or threat.
    23. present: It identifies a swatting incident and threatening emails, which are specific threats.
    24. present: It identifies a swatting incident and threatening emails as the specific hazard.
    25. present: It names a "Swatting incident" and threatening emails, a specific hazard.
  • Locationpresent25/25

    Final assessment

    All 25 reads find Location present: the advisory is tied to the SLC campus and selected campus offices.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It refers to the SLC campus and campus offices as the affected place.
    2. present: It refers to the SLC campus and selected campus offices.
    3. present: It refers to the SLC campus and selected campus offices.
    4. present: It refers to the "SLC campus" and "campus offices", which are named places.
    5. present: It refers to the SLC campus and selected campus offices.
    6. present: It places the event on the SLC campus and at selected campus offices.
    7. present: It refers to the "SLC campus" and "campus offices", which count as named places.
    8. present: Events are placed on the SLC campus and at selected campus offices.
    9. present: The advisory is tied to the SLC campus and selected campus offices.
    10. present: It refers to the SLC campus and selected campus offices as the affected places.
    11. present: It refers to the "SLC campus" and "selected campus offices".
    12. present: It refers to the SLC campus and selected campus offices.
    13. present: It refers to the SLC campus and selected campus offices.
    14. present: The advisory covers the "SLC campus" and "selected campus offices".
    15. present: It refers to the SLC campus and selected campus offices.
    16. present: It points to the "SLC campus" and "selected campus offices".
    17. present: It refers to the SLC campus and campus offices.
    18. present: It locates the advisory on the SLC campus and selected campus offices.
    19. present: It locates the advisory on the "SLC campus" and "selected campus offices".
    20. present: It refers to the SLC campus and selected campus offices.
    21. present: The advisory is for the SLC campus and selected campus offices.
    22. present: It refers to the SLC campus and selected campus offices.
    23. present: The advisory is tied to the SLC campus and selected campus offices.
    24. present: It refers to the SLC campus and selected campus offices as the places affected.
    25. present: It places the event on the "SLC campus" and at "campus offices".
  • Guidancepresent25/25

    Final assessment

    All 25 reads find Guidance present: people are told to call 911 if urgent, forward emails, and stay informed through official channels.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It tells people to call 911 if urgent, forward emails, and stay informed through official channels.
    2. present: It tells people to Call 911 if in an urgent situation and to stay informed through official channels.
    3. present: It tells people to call 911 if urgent, forward emails, and stay informed through official channels.
    4. present: It tells people to call 911 if urgent, forward emails, and stay informed through official channels.
    5. present: It tells people to call 911 in an urgent situation and to stay informed via official channels.
    6. present: It tells people to call 911 if urgent, forward emails, and stay informed via official channels.
    7. present: It tells people to call 911 if urgent and to stay informed through official channels.
    8. present: Recipients are told to call 911 in an urgent situation and to forward concerning emails.
    9. present: It tells people to call 911 in an urgent situation and to forward threatening emails.
    10. present: It tells people to call 911 if urgent, forward emails, and stay informed via official channels.
    11. present: It directs people to call 911 in an urgent situation and stay informed via official channels.
    12. present: It tells people to call 911 if urgent, forward concerning emails, and stay informed via official channels.
    13. present: It tells people to call 911 in an urgent situation and to stay informed via official channels.
    14. present: It tells people to forward those emails, "Call 911" if urgent, and stay informed through official channels.
    15. present: It tells people to call 911 in an urgent situation and to stay informed through official channels.
    16. present: It tells people to forward emails, "Call 911" if urgent, and stay informed via official channels.
    17. present: It tells people to call 911 in an urgent situation and stay informed via official channels.
    18. present: It tells people to call 911 if urgent, forward concerning emails, and stay informed through official channels.
    19. present: It tells people to call 911 in an urgent situation and to stay informed through official channels.
    20. present: It tells people to call 911 in an urgent situation and stay informed via official channels.
    21. present: It tells people to forward those emails, call 911 if urgent, and stay informed through official channels.
    22. present: It tells people to call 911 if urgent and to stay informed through official channels.
    23. present: It tells people to call 911 in an urgent situation, forward emails, and stay informed via official channels.
    24. present: It tells people to forward emails, call 911 if urgent, and stay informed through official channels.
    25. present: It tells people to call 911 in an urgent situation and to stay informed through official channels.
  • Timepresent25/25

    Final assessment

    All 25 reads find Time present because the emails were sent overnight, a recency cue for when the activity occurred.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: It states the emails were sent overnight, a recency cue.
    2. present: The emails are said to have been sent overnight, a recency cue.
    3. present: The emails were sent overnight, which marks recency.
    4. present: The emails were sent "overnight", which says when the activity occurred.
    5. present: The emails are described as sent "overnight," which is a recency cue.
    6. present: The emails were sent overnight, a recency cue for when the hazard occurred.
    7. present: The threatening emails were sent "overnight", which marks when the activity occurred.
    8. present: Overnight states when the emails were sent and supplies a recency cue.
    9. present: Overnight states when the emails were sent, a recency cue.
    10. present: Overnight states when the threatening emails were sent.
    11. present: The emails were sent "overnight", a recency cue.
    12. present: The emails are described as sent overnight, which marks when the activity occurred.
    13. present: The emails were sent overnight, which conveys when the activity occurred.
    14. present: The emails are described as sent "overnight", which marks when the activity occurred.
    15. present: The emails were sent overnight, which conveys when the activity occurred.
    16. present: The emails are said to have been sent "overnight", a recency cue.
    17. present: Emails are described as sent overnight, a recency cue.
    18. present: Overnight states when the emails were sent, a recency cue.
    19. present: The emails were sent "overnight", which supplies a recency and time frame.
    20. present: The emails were sent "overnight", which conveys when the activity occurred.
    21. present: The emails are said to have been sent overnight, which marks when and recency.
    22. present: The emails were sent "overnight", which conveys when the activity occurred.
    23. present: Overnight states when the threatening emails were sent, a recency cue.
    24. present: Overnight locates when the threatening emails were sent.
    25. present: The emails were sent "overnight", which marks when the threat activity occurred.
  • Impactpresent25/25

    Final assessment

    All 25 reads find Impact present: swatting is called a hazardous hoax that causes considerable disruption, stating severity and harm.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: It calls swatting a hazardous form of harassment and says these hoaxes cause considerable disruption.
    2. present: It calls swatting a hazardous form of harassment and says these hoaxes cause considerable disruption.
    3. present: Swatting is called a hazardous hoax that causes considerable disruption, stating severity and harm.
    4. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and harm.
    5. present: Swatting is called a hazardous form of harassment that causes considerable disruption.
    6. present: It calls swatting a hazardous form of harassment that causes considerable disruption.
    7. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and harm.
    8. present: Swatting is called a hazardous form of harassment that causes considerable disruption.
    9. present: Swatting is called hazardous and the hoaxes are said to cause considerable disruption.
    10. present: Swatting is called a hazardous form of harassment, and the hoaxes cause considerable disruption.
    11. present: Swatting is called a "hazardous" hoax that causes "considerable disruption".
    12. present: Swatting is called a hazardous form of harassment that causes considerable disruption.
    13. present: It calls swatting a hazardous form of harassment whose hoaxes cause considerable disruption.
    14. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and consequences.
    15. present: Swatting is called a hazardous hoax that causes considerable disruption, stating severity and consequences.
    16. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and harm.
    17. present: Swatting is called a hazardous hoax that causes considerable disruption, stating severity and consequences.
    18. present: Swatting is called a hazardous form of harassment, and the hoaxes are said to cause considerable disruption.
    19. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and consequences.
    20. present: Swatting is called a "hazardous" harassment that causes "considerable disruption".
    21. present: Swatting is called a hazardous form of harassment whose hoaxes cause considerable disruption, stating severity and harm.
    22. present: Swatting is called a "hazardous" hoax that causes "considerable disruption", stating severity and harm.
    23. present: Swatting is called a hazardous form of harassment whose hoaxes cause considerable disruption, stating severity and harm.
    24. present: It calls swatting a hazardous form of harassment and says these hoaxes cause considerable disruption.
    25. present: Swatting is called a "hazardous form of harassment" whose hoaxes "cause considerable disruption".

Coded by SuperGrok Heavy 4.5

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

The University of Utah posts live Campus Alert products at alert.utah.edu. The Friday, September 18, 2026 7:59 a.m. SLC campus advisory is the full body as published on that page. Distinct from 2025-11-12-university-of-utah-swatting.
Analysis

Key Findings

Official advisory names swatting, asks offices to forward threatening emails to uupd-tips@utah.edu, and tells people to call 911 if urgent.
Outcome
Police investigating overnight threatening emails to selected SLC campus offices; believed to be swatting. No all-clear on the live alert page at capture.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. Official
    University of Utah Campus Alert live advisory
    alert.utah.edu
    archived copy
Cite this case

Campus Alert Archive. "University of Utah: Swatting emails targeting selected campus offices." Incident of September 18, 2026. Added September 2026. https://campusalertarchive.com/case/university-of-utah-swatting-emails-2026-09-18/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
public-r1utahswattingcampus-alertfresh-weekUnder Investigation
Added September 2026Updated September 2026Via ingestion