Campus Alert Archive
EvCC

Emailed threat citing explosives and firearms prompts 'Not a drill' lockdown

AI-generated · every claim is source-linked
WAthreat of violenceemergency notificationmedium confidence
Compare →
UnfoundedNo evidence of an actual threat was found. The institutional response is documented because the alert communication is identical to what would occur during a real incident.

On the morning of May 9, 2022, Everett Community College in Washington went into lockdown after a threatening email referencing explosives and firearms was discovered, with a 7:33 a.m. PDT alert stating 'Not a drill.' Skagit Valley College locked down its campuses around the same time over a related email. Police found no credible threat, and EvCC lifted its lockdown by 8:58 a.m. PDT but stayed closed for the day.

Alerts
2
Response
—
Killed
—
Injured
—
Institution
Everett Community College
Community College · WA
All EvCC cases →
~19,000 students
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTTwitter/X
Verified verbatim164 chars
EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu
Verify this quote
@EverettCC on X (verbatim raw t.co)x.comfind archived copies
My Everett News quoted the 7:33 a.m. PDT alert verbatim: the main campus was in lockdown due to a threat to campus, with the staccato 'Not a drill. Lock doors. Seek shelter. Avoid being seen or heard.' instructions.
The threatening email had been sent around 8 p.m. Sunday, May 8, and was discovered by staff Monday morning, creating an overnight delay between threat and alert.
The 'avoid being seen or heard' instruction mirrors standardized Run-Hide-Fight lockdown guidance.
ALL CLEARTwitter/X+1h 25m
Verified verbatim164 chars
EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu
Verify this quote
@EverettCC on X (verbatim lockdown ended)x.comfind archived copies
HeraldNet reported that at 8:58 a.m. PDT EvCC tweeted the lockdown had been lifted but that in-person classes and services were canceled for the rest of the day.
This is a genuine all-clear because it lifts the lockdown, though the campus closure continued for operational reasons after the threat was cleared.
A follow-up tweet at 9:39 a.m. PDT confirmed all campuses and centers would be closed for the remainder of Monday.
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

EvCC's lockdown has ended, but EvCC's campus remains closed. In-person classes and services classes canceled for May 9. WSU Everett open. Info: http://EverettCC.edu

  • Sourcepresent23/25

    Final assessment

    Clear majority found 'EvCC' and 'WSU Everett' identify the sending institutions, with a small minority missing the reference.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: 'EvCC's lockdown' and 'WSU Everett open'
    2. present: EvCC and WSU Everett are named institutions issuing this update.
    3. present: References 'EvCC' and 'WSU Everett'
    4. present: 'EvCC' identifies the sending institution.
    5. present: 'EvCC' and 'WSU Everett' named
    6. present: Signed 'EvCC' and mentions 'WSU Everett'.
    7. present: References 'EvCC' and 'WSU Everett'.
    8. present: 'EvCC's lockdown' and 'WSU Everett' identify the sending institutions.
    9. present: 'EvCC's lockdown' and 'WSU Everett'
    10. present: 'EvCC' identifies institution as sender.
    11. present: EvCC, WSU Everett
    12. present: 'EvCC' identifies the sending institution.
    13. present: 'EvCC' Everett Community College names itself as issuer.
    14. present: References "EvCC" and "WSU Everett" as institutions.
    15. present: 'EvCC's lockdown' and reference to WSU Everett
    16. absent: No sender or agency identified, only institution name 'EvCC' referenced.
    17. absent: No sender or agency name given, only institution abbreviation 'EvCC'
    18. present: 'EvCC' and 'WSU Everett' name the sending institutions.
    19. present: 'EvCC's lockdown' and reference to WSU Everett identify the institution.
    20. present: Named sender "EvCC" and "WSU Everett".
    21. present: 'EvCC' names the institution as sender.
    22. present: 'EvCC' and 'WSU Everett' named.
    23. present: 'EvCC' and 'WSU Everett' identified as sending institutions.
    24. present: EvCC, WSU Everett named
    25. present: References 'EvCC' and 'WSU Everett' as institutions.
  • Hazardabsent0/25

    Final assessment

    Unanimous agreement: the message only references the prior lockdown ending, never naming the underlying hazard that caused it.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: No hazard named, only status of lockdown ending and closures
    2. absent: Never states what caused the lockdown, only that it ended.
    3. absent: Refers to prior 'lockdown' but does not restate the hazard type
    4. absent: No specific hazard named, only references the lockdown ending.
    5. absent: Refers to 'lockdown has ended' with no hazard named
    6. absent: No specific hazard named, only references the ended lockdown.
    7. absent: No specific hazard named, only that lockdown 'has ended'.
    8. absent: No specific hazard named; only describes lockdown ending and closure.
    9. absent: No specific hazard named, only that lockdown has ended
    10. absent: Only references prior lockdown ending, no hazard named in this text.
    11. absent: lockdown referenced but underlying hazard not named in this text
    12. absent: No hazard named; only references the lockdown ending and closure.
    13. absent: References the lockdown ending but doesn't name the original hazard.
    14. absent: No hazard named; references a lockdown that has already ended, no threat type given.
    15. absent: No hazard named, only that lockdown 'has ended'
    16. absent: Refers to prior 'lockdown' but doesn't name the hazard causing it.
    17. absent: No hazard named, only refers to lockdown having ended
    18. absent: Only references the prior lockdown ending, no hazard named in this message.
    19. absent: No hazard stated, only that lockdown has ended and campus remains closed.
    20. absent: No hazard named, message only reports lockdown ended and closures.
    21. absent: No specific hazard named, only 'lockdown has ended'.
    22. absent: No specific hazard named, only lockdown ending and closure mentioned.
    23. absent: Refers to a prior 'lockdown' now ended, no hazard named in this text.
    24. absent: No specific hazard named, just lockdown ended
    25. absent: No hazard named; only references the lockdown ending, not the underlying threat.
  • Locationpresent25/25

    Final assessment

    Unanimous agreement: 'EvCC's campus' and 'WSU Everett' name the location.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: 'EvCC's campus' and 'WSU Everett'
    2. present: References EvCC's campus specifically.
    3. present: 'EvCC's campus'
    4. present: References 'EvCC's campus' and 'WSU Everett'.
    5. present: 'EvCC's campus'
    6. present: 'EvCC's campus'.
    7. present: References 'EvCC's campus'.
    8. present: 'EvCC's campus' and 'WSU Everett' name locations.
    9. present: 'EvCC's campus'
    10. present: 'EvCC's campus' named.
    11. present: EvCC's campus, WSU Everett
    12. present: 'EvCC's campus' gives the location.
    13. present: 'EvCC's campus' given.
    14. present: "EvCC's campus" named.
    15. present: 'EvCC's campus' and 'WSU Everett'
    16. present: 'EvCC's campus'.
    17. present: 'EvCC's campus' named
    18. present: 'EvCC's campus'.
    19. present: 'EvCC's campus'.
    20. present: References "EvCC's campus" and "WSU Everett".
    21. present: 'EvCC's campus' names location.
    22. present: 'EvCC's campus' and 'WSU Everett'.
    23. present: 'EvCC's campus' given.
    24. present: EvCC's campus
    25. present: 'EvCC's campus' and 'WSU Everett' named.
  • Guidanceabsent1/25

    Final assessment

    Overwhelming majority found no protective action instructed, only informational status about closures and cancellations for May 9.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. absent: No protective action instructed beyond status update
    2. absent: Purely informational about closures, no protective instruction given.
    3. present: 'classes and services classes canceled for May 9'
    4. absent: No protective action instructed; states classes are canceled.
    5. absent: Informational status update, no protective instruction
    6. absent: No protective action instructed, only informational closure status.
    7. absent: No protective action instructed, informational only.
    8. absent: No protective action instructed, only closure/status information.
    9. absent: No protective action instructed
    10. absent: No protective instruction given, only closure status.
    11. absent: No protective action instructed, only closure status
    12. absent: No protective action instructed, only informational closure notice.
    13. absent: States closures/cancellations, no direct protective action instructed.
    14. absent: No protective instruction, only status update about closures.
    15. absent: No instruction given, purely informational
    16. absent: No protective instruction, only describes closures.
    17. absent: No protective action, only closure info
    18. absent: No protective action instructed; states classes canceled.
    19. absent: No protective action instructed, only informational status.
    20. absent: No protective action instructed, states classes canceled.
    21. absent: No protective action instructed; classes canceled is not a protective instruction.
    22. absent: No protective action instructed, only closure/status update.
    23. absent: States classes canceled but gives no protective action instruction.
    24. absent: States classes canceled, no protective action instruction
    25. absent: No protective action instructed; states classes canceled and campus status.
  • Timepresent25/25

    Final assessment

    Unanimous agreement: 'for May 9' gives a specific date.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. present: 'for May 9'
    2. present: Specifies classes canceled for May 9.
    3. present: 'for May 9' gives a date
    4. present: States 'for May 9'.
    5. present: 'for May 9'
    6. present: 'for May 9' gives a date.
    7. present: Gives 'May 9'.
    8. present: 'for May 9' gives a specific date.
    9. present: 'for May 9'
    10. present: 'for May 9' gives date.
    11. present: for May 9
    12. present: 'for May 9' gives a date.
    13. present: 'for May 9' gives date.
    14. present: "for May 9" gives a date.
    15. present: 'for May 9'
    16. present: 'for May 9'.
    17. present: 'canceled for May 9'
    18. present: 'for May 9' gives a date.
    19. present: 'canceled for May 9'.
    20. present: Gives date "May 9".
    21. present: 'for May 9' gives a date.
    22. present: 'for May 9' given as date.
    23. present: 'for May 9' date given.
    24. present: For May 9
    25. present: 'for May 9' gives date.
  • Impactabsent0/25

    Final assessment

    Unanimous agreement: no stated consequence or severity is conveyed.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: No stated consequence
    2. absent: No consequence or severity described anywhere in the text.
    3. absent: No stated harm or severity
    4. absent: No stated consequence conveyed.
    5. absent: No stated harm or severity conveyed
    6. absent: No stated consequence or severity described.
    7. absent: No stated consequence or severity.
    8. absent: No stated potential harm given no hazard is named.
    9. absent: No stated consequence or severity
    10. absent: No stated consequence given.
    11. absent: No stated consequence given
    12. absent: No stated consequence given.
    13. absent: No stated harm or severity described.
    14. absent: No stated harm or severity.
    15. absent: No stated consequence
    16. absent: No stated consequence.
    17. absent: No stated consequence given
    18. absent: No stated consequence or severity.
    19. absent: No stated harm or severity.
    20. absent: No stated consequence or severity.
    21. absent: No stated consequence or severity described.
    22. absent: No stated harm or severity conveyed.
    23. absent: No stated consequence or severity.
    24. absent: No stated consequence
    25. absent: No stated harm or severity conveyed.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Everett Community College in Snohomish County, Washington, locked down its main campus on the morning of May 9, 2022 after staff discovered a threatening email sent the prior evening that referenced explosives and firearms and included racist language. EvCC's 7:33 a.m. PDT alert told the campus it was 'Not a drill' and to lock doors, seek shelter, and avoid being seen or heard. Skagit Valley College locked down all its campuses around the same time over a related threat, and several area colleges had received similar emails the previous Friday. Police found no credible threat; EvCC lifted its lockdown at 8:58 a.m. PDT and closed for the day. The episode shows a coordinated multi-college threat wave and the lag created when a threat arrives overnight and is only seen the next morning.
Analysis

Key Findings

EvCC sent a 7:33 a.m. PDT lockdown alert on May 9, 2022 stating 'Not a drill' after an overnight threatening email referencing explosives and firearms was discovered
Skagit Valley College locked down its campuses around the same time over a related threat, part of a wave that hit several area colleges
EvCC lifted the lockdown at 8:58 a.m. PDT on May 9, 2022 but kept the campus closed for the day, confirmed by a 9:39 a.m. PDT follow-up
The case highlights the overnight-threat lag problem: the email was sent Sunday evening but only seen and acted on Monday morning
Outcome
Everett police and other agencies swept the campuses and concluded there was no credible threat. EvCC lifted its lockdown at 8:58 a.m. and announced a full-day closure at 9:39 a.m. Several area colleges had received similar emails the prior Friday.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. News
    'Threat' sends Everett Community College into lockdown - HeraldNet
    heraldnet.com
    archived copy
  2. News
    Online Threat Forces Closure Of Everett Community College Campus - My Everett News
    myeverettnews.com
    archived copy
  3. News
    UPDATE: Skagit Valley College, others in region received email threat prior to lockdown - Cascadia Daily News
    cascadiadaily.com
    archived copy
  4. News
    'Not a drill:' Threat spurs lockdown at Everett Community College, Skagit Valley College - KOMO News
    komonews.com
    archived copy
  5. Source
    2 Community Colleges Cancel Classes After Threats - Inside Higher Ed
    insidehighered.com
    archived copy
  6. Social
    @EverettCC on X (verbatim lockdown ended)
    x.com
    archived copy
Cite this case

Campus Alert Archive. "Everett Community College: Emailed threat citing explosives and firearms prompts 'Not a drill' lockdown." Incident of May 9, 2022. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/everett-community-college-email-threat-lockdown-2022-05-09/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
threat-of-violencelockdowncommunity-collegewashingtoneverettemailed-threatnot-a-drillunfoundedemergency-notificationUnfounded
Added May 2026Updated July 2026Via ingestion