Campus Alert Archive
UTC

False active-shooter report locked down campus during the first week of classes

AI-generated · every claim is source-linked
TNswattingemergency notificationmedium confidence
Compare →
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On August 21, 2025, a 911 call at approximately 12:29 PM EDT falsely reported an active shooter in the library at the University of Tennessee at Chattanooga during the first week of the fall semester. More than 100 law enforcement officers responded, and campus was locked down for over an hour before the all-clear was issued at 1:51 PM EDT.

Alerts
3
Response
—
Killed
—
Injured
—
Institution
University of Tennessee at Chattanooga
Public Masters · TN
All UTC cases →
~11,500 studentsUTC-Alert
Documented Timeline

Alert Sequence

3 messages in sequence · 3 verified verbatim

INITIAL ALERTSMS
Verified verbatimUniversity of Tennessee at Chattanooga (@UTChattanooga) posting the UTC ALERT verbatim on X112 chars
UTC ALERT: Possible active shooter in the University Center or Library. Run. Hide. Fight. More info forthcoming.
Sent at approximately 12:42 PM EDT on August 21, 2025, roughly 13 minutes after Hamilton County 911 received the swatting call at 12:29 PM EDT, the dispatcher reportedly heard what sounded like gunshots in the background of the call
Names two specific buildings (the University Center and the Library) reflecting the caller's claim of being in the library when they saw the suspect
Uses the standard Run-Hide-Fight national-best-practices language for active shooter notifications
All available university police officers were summoned, with over 100 officers ultimately responding to the scene
UPDATETwitter/X+34 min
Verified verbatim@UTChattanooga on X (verbatim remain on lockdown)177 chars
UTC ALERT: All individuals on the UTC campus should remain on lockdown. Do not move unless directed by law enforcement. Campus facilities are currently being searched by police.
Exact @UTChattanooga status
ALL CLEARTwitter/X+1h 11m
Verified verbatim@UTChattanooga on X (verbatim raw t.co)249 chars
UTC-ALERT: The UTC campus is ALL CLEAR. The lockdown has been lifted. Law enforcement found no evidence of a threat. All classes & activities are cancelled until 8/22 at 8:00 AM. All students and non-essential employees may leave campus for the day.
Exact @UTChattanooga status
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

UTC ALERT: Possible active shooter in the University Center or Library. Run. Hide. Fight. More info forthcoming.

  • Sourcepresent25/25

    Final assessment

    All 25 reads agree the sender is present; the message opens with the branded tag "UTC ALERT".

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: It opens with "UTC ALERT:", a branded signature identifying the sender.
    2. present: The branded signature "UTC ALERT" identifies the sender.
    3. present: The branded tag "UTC ALERT" identifies the university sender.
    4. present: It opens with "UTC ALERT", a branded sender signature.
    5. present: The message opens with the branded signature "UTC ALERT", identifying the sender.
    6. present: The message opens with the branded signature "UTC ALERT", which identifies the sender.
    7. present: Opens with the branded signature "UTC ALERT", identifying the sender.
    8. present: Opens with branded signature "UTC ALERT", identifying the sender.
    9. present: Opens with "UTC ALERT", the branded signature identifying the sender.
    10. present: It is headed "UTC ALERT", a branded sender tag.
    11. present: Opens with the branded tag "UTC ALERT", identifying the sender.
    12. present: Opens with the branded signature "UTC ALERT", identifying the sender.
    13. present: The branded signature "UTC ALERT" identifies the sender.
    14. present: Opens with the branded signature "UTC ALERT", identifying the sender.
    15. present: Opens with "UTC ALERT", a branded signature identifying the sender.
    16. present: Opens with branded signature "UTC ALERT", identifying the sender.
    17. present: Opens with "UTC ALERT", a branded signature identifying the sender.
    18. present: The message opens with "UTC ALERT", identifying the sender.
    19. present: The message opens with "UTC ALERT", a branded sender signature.
    20. present: It opens with the branded sender "UTC ALERT", identifying the issuer.
    21. present: Opens with branded signature "UTC ALERT", identifying the sender.
    22. present: It opens with "UTC ALERT", a branded sender signature.
    23. present: Opens with "UTC ALERT:", a branded signature identifying the sender.
    24. present: Opens with the branded signature "UTC ALERT", identifying the sender.
    25. present: It opens with "UTC ALERT", a branded signature identifying the sender.
  • Hazardpresent25/25

    Final assessment

    All 25 reads agree a hazard is present, reporting a possible active shooter.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: It names "Possible active shooter", a specific threat.
    2. present: It names "Possible active shooter", a specific threat.
    3. present: It reports a "Possible active shooter", a specific threat.
    4. present: It names "Possible active shooter", a specific hazard.
    5. present: It names "Possible active shooter", a specific threat.
    6. present: It names "Possible active shooter", a specific threat.
    7. present: Names "Possible active shooter", a specific threat.
    8. present: It names "Possible active shooter in the University Center or Library", a specific threat.
    9. present: Names "Possible active shooter", a specific threat.
    10. present: It names a "Possible active shooter", a specific threat.
    11. present: Names "Possible active shooter", a specific hazard.
    12. present: It names a "Possible active shooter", a specific threat.
    13. present: It names the threat specifically: "Possible active shooter".
    14. present: Names the hazard specifically as "Possible active shooter".
    15. present: Names a "Possible active shooter", a specific hazard.
    16. present: Names "Possible active shooter", a specific threat.
    17. present: Names "Possible active shooter", a specific hazard.
    18. present: It reports "Possible active shooter", a specific hazard.
    19. present: It names "Possible active shooter", a specific threat.
    20. present: It reports a "Possible active shooter", a specific hazard.
    21. present: Names "Possible active shooter", a specific hazard.
    22. present: It names "Possible active shooter", a specific hazard.
    23. present: It names "Possible active shooter", a specific hazard.
    24. present: Names "Possible active shooter", a specific threat.
    25. present: It reports a "Possible active shooter in the University Center or Library", a specific threat.
  • Locationpresent25/25

    Final assessment

    All reads agree a location is present, naming the University Center or Library.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It names "the University Center or Library", specific places.
    2. present: It names "the University Center or Library", specific places.
    3. present: It names "the University Center or Library", specific locations.
    4. present: It names "the University Center or Library", specific places.
    5. present: It names "the University Center or Library".
    6. present: It names "the University Center or Library", specific places.
    7. present: Names "the University Center or Library", specific places.
    8. present: It names "the University Center or Library", specific places.
    9. present: Names "the University Center or Library", specific places.
    10. present: It names "the University Center or Library", specific places.
    11. present: Says "in the University Center or Library", specific places.
    12. present: It names "the University Center or Library", specific places.
    13. present: It names "the University Center or Library", specific places.
    14. present: Specifies "the University Center or Library", named places.
    15. present: Names "the University Center or Library", specific locations.
    16. present: Names "the University Center or Library", specific places.
    17. present: Names "the University Center or Library", specific places.
    18. present: It names "the University Center or Library", specific places.
    19. present: It names "the University Center or Library", specific places.
    20. present: It names "the University Center or Library", a specific place.
    21. present: Names "the University Center or Library", specific places.
    22. present: It names "the University Center or Library", specific places.
    23. present: It names "the University Center or Library", specific places.
    24. present: Names "the University Center or Library", specific locations.
    25. present: It names "the University Center or Library", specific places.
  • Guidancepresent25/25

    Final assessment

    All 25 reads agree guidance is present; recipients are told "Run. Hide. Fight.".

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It instructs recipients to "Run. Hide. Fight.", protective actions.
    2. present: It instructs "Run. Hide. Fight.".
    3. present: It instructs recipients to "Run. Hide. Fight.".
    4. present: It instructs "Run. Hide. Fight.", protective actions.
    5. present: It instructs recipients to "Run. Hide. Fight.".
    6. present: It instructs recipients to "Run. Hide. Fight.", protective actions.
    7. present: Instructs recipients to "Run. Hide. Fight.", protective actions.
    8. present: It instructs recipients to "Run. Hide. Fight.", protective actions.
    9. present: Instructs "Run. Hide. Fight.", protective actions.
    10. present: It instructs recipients to "Run. Hide. Fight.", protective actions.
    11. present: Instructs recipients with "Run. Hide. Fight.", protective actions.
    12. present: It instructs recipients with "Run. Hide. Fight".
    13. present: It instructs "Run. Hide. Fight.", protective actions.
    14. present: Instructs "Run. Hide. Fight.", protective actions.
    15. present: Instructs recipients with "Run. Hide. Fight.", protective actions.
    16. present: Instructs "Run. Hide. Fight.", protective actions.
    17. present: Instructs recipients to "Run. Hide. Fight.".
    18. present: It instructs people to "Run. Hide. Fight.", protective actions.
    19. present: It instructs recipients to "Run. Hide. Fight.", protective actions.
    20. present: It tells recipients to "Run. Hide. Fight.", a protective action protocol.
    21. present: Instructs recipients to "Run. Hide. Fight.".
    22. present: It instructs recipients to "Run. Hide. Fight", protective actions.
    23. present: It instructs "Run. Hide. Fight.", protective actions.
    24. present: Instructs recipients "Run. Hide. Fight.", protective actions.
    25. present: It instructs recipients "Run. Hide. Fight.", protective actions.
  • Timeabsent0/25

    Final assessment

    All 25 reads agree no timing is present; no clock time, date, or recency cue appears.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue such as "now" appears.
    2. absent: No clock time, date, or recency cue appears.
    3. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    4. absent: No clock time, date, or recency cue appears in the text.
    5. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    6. absent: No clock time, date, or recency cue appears; "active shooter" is the hazard, not a time.
    7. absent: No clock time, date, or recency cue appears in the text.
    8. absent: No clock time, date, or recency word appears; "active" is part of the hazard.
    9. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears; "active" is part of the hazard.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency cue appears in the text.
    14. absent: No clock time, date, or recency cue appears; "active" is part of the hazard.
    15. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    16. absent: No clock time, date, or recency word appears, only "More info forthcoming".
    17. absent: No clock time, date, or recency cue appears; "active" is part of the hazard.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency word appears; "active shooter" is hazard not time.
    20. absent: No clock time, date, or recency word appears; "active" is part of the hazard.
    21. absent: No clock time, date, or recency word appears; "active" is part of the hazard.
    22. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    23. absent: No clock time, date, or recency cue appears.
    24. absent: No clock time, date, or recency cue appears; "active" is part of the hazard.
    25. absent: No clock time, date, or recency cue appears, only "forthcoming".
  • Impactpresent24/25

    Final assessment

    Present by near-unanimous read (24 of 25): it reports a possible active shooter and directs Run-Hide-Fight, conveying a deadly armed threat to people.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: Reports a possible active shooter and directs Run Hide Fight, strongly implying a life threat.
    2. present: It reports a possible active shooter and directs Run Hide Fight, strongly implying a life-threatening armed danger.
    3. present: A possible active shooter with Run-Hide-Fight conveys a deadly threat to people on campus.
    4. present: It reports a possible active shooter and instructs Run Hide Fight, implying a deadly threat to safety.
    5. present: It reports a possible active shooter with Run Hide Fight, conveying a threat to life and safety.
    6. present: It reports a possible active shooter and instructs Run Hide Fight, implying lethal danger to people.
    7. present: Reports a possible active shooter and instructs Run Hide Fight, implying a clear life threat.
    8. present: It reports a possible active shooter with Run-Hide-Fight, conveying a deadly threat to people.
    9. present: Reports a possible active shooter with Run Hide Fight, implying a deadly threat to safety.
    10. present: It reports a possible active shooter and directs Run Hide Fight, implying a serious deadly threat.
    11. present: A possible active shooter with Run Hide Fight conveys life-threatening danger requiring escape or defense for safety.
    12. present: Reports a possible active shooter and directs Run-Hide-Fight, strongly implying a deadly threat.
    13. present: Reports a possible active shooter and directs Run Hide Fight, which clearly implies a deadly threat to life.
    14. present: Reports a possible active shooter and directs Run Hide Fight, with the directive conveying lethal danger to people.
    15. present: Reports a possible active shooter with Run Hide Fight, implying a lethal threat to safety.
    16. present: A possible active shooter with run-hide-fight guidance implies a clear life-threatening danger to people.
    17. present: It reports a possible active shooter with Run Hide Fight, implying a deadly threat to people.
    18. present: Possible active shooter with Run, Hide, Fight conveys an immediate threat to life and personal safety.
    19. present: Reports a possible active shooter and directs Run Hide Fight, conveying a clear lethal threat to personal safety.
    20. present: It reports a possible active shooter and directs Run Hide Fight, implying a clear and serious threat of harm.
    21. present: Reports a possible active shooter and directs Run Hide Fight, conveying clear danger to safety.
    22. present: It reports a possible active shooter and orders Run Hide Fight, conveying a serious life threat through that imperative danger framing.
    23. present: A possible active shooter with run-hide-fight conveys a lethal threat to safety.
    24. absent: This names a possible active shooter and gives run-hide-fight guidance but states no harm or consequence.
    25. present: Reports a possible active shooter with Run Hide Fight implying a deadly threat to people.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On August 21, 2025, during the first week of the fall semester, a 911 call at approximately 12:29 PM EDT falsely reported an active shooter in the library at the University of Tennessee at Chattanooga. The university immediately went into lockdown, with students evacuated from classrooms and buildings as law enforcement swept the campus. In total, more than 100 officers from multiple agencies responded to the scene. The all-clear was given at 1:51 PM EDT after law enforcement found no evidence of a threat, and classes were cancelled for the remainder of the day. An intelligence report later tied the incident to members of Purgatory, an extremist swatting group that 'very likely made false emergency reports targeting at least 10 U.S. universities' between August 21 and 25. The UTC incident was one of the first in the August 2025 wave, occurring the same day as a similar hoax at Villanova University in Pennsylvania. The FBI investigated, and in May 2026 a Pennsylvania juvenile was federally charged in connection with the UTC hoax and a series of swatting calls targeting universities nationwide.
Analysis

Key Findings

Over 100 officers from multiple agencies responded to the hoax call, illustrating the massive resource diversion caused by swatting
The incident occurred during the first week of the fall semester, maximizing disruption for new and returning students
An intelligence report later linked the call to the Purgatory swatting group, which targeted at least 10 universities in a five-day span
Outcome
Law enforcement found no evidence of a threat after a thorough sweep of campus. The hoax was linked to the extremist swatting group Purgatory. Classes were cancelled for the remainder of the day. The FBI opened an investigation.
Provenance

Sources

  1. News
    Probe ongoing after fake active shooter threat at UTC (Chattanooga Times Free Press)
    timesfreepress.com
    archived copy
  2. News
    UT Chattanooga campus cleared, lockdown lifted (WSMV)
    wsmv.com
    archived copy
  3. News
    Intelligence report ties swatting group to hoax threat at UTC (News Channel 9)
    newschannel9.com
    archived copy
  4. News
    FBI investigates college swatting hoaxes (Fox News)
    foxnews.com
    archived copy
  5. News
    DOJ says Pennsylvania juvenile faces federal charges tied to August 2025 UTC swatting hoax (NewsChannel 9)
    newschannel9.com
    archived copy
  6. Social
    @UTChattanooga X lockdown update
    x.com
    archived copy
  7. Social
    @UTChattanooga X ALL CLEAR
    x.com
    archived copy
Cite this case

Campus Alert Archive. "University of Tennessee at Chattanooga: False active-shooter report locked down campus during the first week of classes." Incident of August 21, 2025. Added April 2026; last updated July 2026. https://campusalertarchive.com/case/ut-chattanooga-swatting-2025-08-21/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingactive-shooter-hoaxpurgatoryfbi-investigationtennesseelibraryfirst-week-of-classespublic-universityHoax
Added April 2026Updated July 2026Via ingestion