Campus Alert Archive
Northwestern

Bullet casings found after a shots-fired report; 49-minute campus lockdown

AI-generated · every claim is source-linked
ILshootingemergency notificationhigh confidence
Compare →
Under Investigation

Northwestern issued an "Active Threat" AlertNU at 10:53 p.m. CST on a Sunday evening after reports of shots fired near the Bienen School of Music on Arts Circle Drive. Police found bullet casings but no victims, and the all-clear was issued at 11:42 p.m. CST after a 49-minute campus lockdown.

Alerts
3
Response
—
Killed
—
Injured
—
Institution
Northwestern University
Private R1 · IL
All Northwestern cases →
~22,601 studentsAlertNU
Official alert policy
Read when and how Northwestern says it will use AlertNU: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

3 messages in sequence · 3 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTTwitter/X
Verified verbatim160 chars
AlertNU: There is an Active Threat event on the Evanston Campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.
Verify this quote
@NorthwesternU on X (verbatim)x.comfind archived copies
Verbatim text confirmed from the @NorthwesternU X/Twitter post (status 1761977610198782435) on February 25, 2024
Sent at 10:53 p.m. CST on February 25, 2024, the alert used the 'Run, Hide, Fight' framework that has become standard for active threat notifications at U.S. universities
The use of 'Active Threat' rather than 'Active Shooter' leaves open the possibility of various threat types while still conveying maximum urgency
UPDATETwitter/X+14 min
Verified verbatim171 chars
Northwestern Police are on scene investigating reports of shots fired near 70 Arts Circle Dr on the Evanston campus. Visit http://northwestern.edu/emergency for updates.
Verify this quote
@NorthwesternU on X (verbatim raw t.co)x.comfind archived copies
Sent 14 minutes after the initial alert at 11:07 p.m. CST on February 25, 2024, this update specified the location near the Bienen School of Music at 70 Arts Circle Drive
The shift from 'Run, Hide, Fight' to 'Shelter in place' indicates police had established a perimeter and determined the situation was more contained
ALL CLEARTwitter/X+52 min
Verified verbatim213 chars
All clear issued following report of shots fired near 70 Arts Circle Dr in Evanston. No injured person located. Police remain on scene investigating. Continue to avoid the area. http://northwestern.edu/emergency
Verify this quote
@NorthwesternU on X (verbatim raw t.co)x.comfind archived copies
Verbatim text from the @NorthwesternU X/Twitter all-clear post on February 25, 2024
Issued at 11:42 p.m. CST on February 25, 2024, ending a 49-minute lockdown from the initial active threat alert
Bullet casings were later recovered from the scene, validating the initial alert, though no victims or suspects were located
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

AlertNU: There is an Active Threat event on the Evanston Campus. Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors. Await further information.

  • Sourcepresent25/25

    Final assessment

    Unanimous: signed with the branded 'AlertNU' signature identifying Northwestern's alert system.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: Signed 'AlertNU'.
    2. present: 'AlertNU' branded signature
    3. present: Branded 'AlertNU' signature.
    4. present: 'AlertNU' branded signature identifies Northwestern's system.
    5. present: 'AlertNU' branded signature identifies the sender.
    6. present: Signed 'AlertNU'.
    7. present: 'AlertNU' branded signature identifies sender.
    8. present: 'AlertNU' branded signature identifies the sender.
    9. present: Branded 'AlertNU' signature identifies Northwestern's alert system.
    10. present: 'AlertNU' branded signature.
    11. present: Labeled 'AlertNU'.
    12. present: 'AlertNU' branded signature identifies the sender.
    13. present: 'AlertNU' branded signature.
    14. present: Branded 'AlertNU' signature.
    15. present: Branded 'AlertNU' identifies the issuing alert system.
    16. present: Branded 'AlertNU' signature.
    17. present: 'AlertNU' branded signature identifies the sending system.
    18. present: Signed 'AlertNU' identifying the alert system.
    19. present: Branded 'AlertNU' signature.
    20. present: 'AlertNU' branded signature identifies sender.
    21. present: Signed 'AlertNU'.
    22. present: Branded 'AlertNU' identifies the issuing system
    23. present: Signed 'AlertNU'.
    24. present: Branded 'AlertNU' signature identifies the sender.
    25. present: Branded 'AlertNU'.
  • Hazardpresent23/25

    Final assessment

    A strong majority credit 'Active Threat event' as naming the hazard category, though a couple of reads felt it was too generic without naming a weapon or specific threat type.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: Names an 'Active Threat event', a recognized specific alert category.
    2. present: 'Active Threat event' names the hazard
    3. present: States 'Active Threat event'.
    4. present: 'Active Threat event' names the hazard.
    5. present: Names 'Active Threat event'.
    6. present: Names 'Active Threat event'.
    7. present: 'Active Threat event' names a specific hazard type.
    8. absent: Says 'Active Threat event' without naming the specific hazard (e.g., shooter, weapon).
    9. present: States 'Active Threat event' as the hazard.
    10. absent: 'Active Threat event' generic, no specific hazard type named.
    11. present: Names 'Active Threat event'.
    12. present: States 'Active Threat event.'
    13. present: 'Active Threat event on the Evanston Campus.'
    14. present: States 'Active Threat event'.
    15. present: States 'Active Threat event' specifically.
    16. present: States 'Active Threat event'.
    17. present: 'Active Threat event' names the hazard.
    18. present: States 'Active Threat event' on campus.
    19. present: States 'Active Threat event'.
    20. present: 'Active Threat event' names specific hazard.
    21. present: Names 'Active Threat event'.
    22. present: States 'an Active Threat event'
    23. present: States 'Active Threat event'.
    24. present: States 'Active Threat event'.
    25. present: States 'Active Threat event'.
  • Locationpresent25/25

    Final assessment

    Unanimous: names the Evanston Campus.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: Names 'the Evanston Campus'.
    2. present: 'Evanston Campus' named
    3. present: Names 'Evanston Campus'.
    4. present: 'Evanston Campus' specified.
    5. present: Names the Evanston Campus.
    6. present: Names 'Evanston Campus'.
    7. present: 'on the Evanston Campus' given.
    8. present: Names 'Evanston Campus'.
    9. present: Names 'the Evanston Campus.'
    10. present: 'Evanston Campus' named.
    11. present: Names the Evanston Campus.
    12. present: Names 'Evanston Campus.'
    13. present: 'Evanston Campus.'
    14. present: Names 'Evanston Campus'.
    15. present: Names the Evanston Campus.
    16. present: Names 'Evanston Campus'.
    17. present: 'Evanston Campus' named.
    18. present: Names 'the Evanston Campus'.
    19. present: Names 'Evanston Campus'.
    20. present: 'Evanston Campus' names location.
    21. present: Names 'Evanston Campus'.
    22. present: Names 'Evanston Campus'
    23. present: Names 'Evanston Campus'.
    24. present: Names 'Evanston Campus'.
    25. present: Names 'Evanston Campus'.
  • Guidancepresent25/25

    Final assessment

    Unanimous: instructs Run, Hide, Fight, take shelter, and lock or barricade doors.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    2. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors'
    3. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    4. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors' explicit instructions.
    5. present: Instructs 'Run, Hide, Fight' and to lock/barricade doors.
    6. present: Instructs 'Run, Hide, Fight' and 'Lock and/or barricade doors'.
    7. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    8. present: Instructs 'Run, Hide, Fight', 'Lock and/or barricade doors'.
    9. present: Instructs 'Run, Hide, Fight... Take proper shelter. Lock and/or barricade doors.'
    10. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    11. present: 'Run, Hide, Fight' and 'Lock and/or barricade doors' are explicit instructions.
    12. present: Instructs 'Run, Hide, Fight,' 'Take proper shelter,' 'Lock and/or barricade doors.'
    13. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    14. present: Instructs 'Run, Hide, Fight' and to lock/barricade doors.
    15. present: Instructs 'Run, Hide, Fight,' shelter, and lock/barricade doors.
    16. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    17. present: 'Run, Hide, Fight... Lock and/or barricade doors.'
    18. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    19. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    20. present: 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors' gives explicit instructions.
    21. present: Instructs 'Run, Hide, Fight...Lock and/or barricade doors'.
    22. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors'
    23. present: Instructs 'Run, Hide, Fight. Take proper shelter. Lock and/or barricade doors.'
    24. present: Instructs 'Run, Hide, Fight' and 'Lock and/or barricade doors'.
    25. present: Instructs 'Run, Hide, Fight', 'Take proper shelter', 'Lock and/or barricade doors'.
  • Timeabsent0/25

    Final assessment

    Unanimous: no clock time or date is given anywhere in the message.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No time given.
    2. absent: no clock time or date given
    3. absent: No clock time or date given, only 'await further information'.
    4. absent: No clock time given; 'is' implies present but no explicit marker.
    5. absent: No time given.
    6. absent: No clock time or date given.
    7. absent: No clock time or date given.
    8. absent: No clock time or date given.
    9. absent: No clock time given, only present-tense framing.
    10. absent: No clock time given.
    11. absent: No time given.
    12. absent: No clock time or date given.
    13. absent: No clock time or date given.
    14. absent: No time or date given.
    15. absent: No clock time or date given.
    16. absent: No clock time or date given in the alert body.
    17. absent: No clock time or recency marker given.
    18. absent: No clock time or date given, only 'await further information'.
    19. absent: No clock time or date given, only 'is' present tense.
    20. absent: No clock time or date given.
    21. absent: No clock time or date given.
    22. absent: No specific clock time given
    23. absent: No clock time or date given.
    24. absent: No clock time or date given.
    25. absent: No clock time or date given.
  • Impactabsent0/25

    Final assessment

    Unanimous: no stated consequence or severity beyond simply naming the threat.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: No stated consequence.
    2. absent: no stated consequence or severity beyond naming threat
    3. absent: No stated consequence or severity beyond the label 'Active Threat'.
    4. absent: No stated potential harm or severity.
    5. absent: No stated potential harm.
    6. absent: No stated harm or severity.
    7. absent: No explicit statement of potential harm beyond naming the threat.
    8. absent: No statement of potential harm beyond the vague 'threat' label.
    9. absent: No stated consequence or severity beyond naming the threat.
    10. absent: No stated consequence beyond the event description.
    11. absent: No stated consequence or severity.
    12. absent: No explicit statement of potential harm beyond naming the threat.
    13. absent: No stated consequence beyond hazard naming.
    14. absent: No explicit statement of potential harm.
    15. absent: No explicit statement of harm beyond naming the threat.
    16. absent: No stated consequence beyond naming the threat.
    17. absent: No stated consequence or severity beyond hazard name.
    18. absent: No explicit statement of potential harm beyond the hazard name.
    19. absent: No explicit statement of potential harm beyond naming 'Active Threat'.
    20. absent: No stated consequence or severity conveyed.
    21. absent: No stated consequence beyond naming the threat.
    22. absent: No stated consequence beyond naming the threat
    23. absent: No stated potential harm beyond naming the threat.
    24. absent: No explicit statement of potential harm.
    25. absent: No explicit statement of potential harm.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

On the evening of Sunday, February 25, 2024, reports of shots fired near the Bienen School of Music on Northwestern's Evanston campus triggered an active threat alert that locked down the campus for nearly 50 minutes. The incident occurred along Arts Circle Drive, near the lakefront area of the Evanston campus. Both Northwestern University Police and Evanston Police responded to the scene and found bullet casings but no injured person or suspect. In a Monday morning email to the community, Chief of Police Bruce Lewis confirmed that no suspect was in custody but the investigation was continuing. The incident came less than a year after a fatal shooting on Clark Street Beach in April 2023 that killed a man and wounded two teenagers, prompting a previous shelter-in-place order. Students expressed frustration that gun violence continued to reach the campus perimeter. The proximity of the lakefront to campus buildings has been a recurring security concern for Northwestern.
Analysis

Key Findings

The 49-minute lockdown from initial alert to all-clear was relatively fast for an active threat response, reflecting rapid police deployment
The 'Run, Hide, Fight' language in the initial alert represents the current best practice for active threat notifications, giving students actionable options
Bullet casings confirmed actual gunfire occurred, distinguishing this from a false alarm, though no victims or suspects were found
This was the second major shooting-related shelter-in-place at Northwestern in under a year, following the April 2023 Clark Street Beach shooting
Outcome
No injuries were reported. Bullet casings were recovered from the scene. No suspect was taken into custody, and the investigation continued.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. Social
    @NorthwesternU AlertNU chain (X)
    x.com
    archived copy
  2. Social
    @NorthwesternU AlertNU chain (X)
    x.com
    archived copy
  3. Student Paper
    Northwestern issues all clear message for shooting threat on Evanston campus - Daily Northwestern
    dailynorthwestern.com
    archived copy
  4. News
    Northwestern shooting: NU police investigate report of shots fired - ABC7 Chicago
    abc7chicago.com
    archived copy
  5. News
    Police find bullet casings on NU campus after shots fired report - Evanston RoundTable
    evanstonroundtable.com
    archived copy
  6. News
    Northwestern University community shaken after shots fired Sunday - Chicago Sun-Times
    chicago.suntimes.com
    archived copy
  7. Social
    @NorthwesternU on X (verbatim)
    x.com
    archived copy
Cite this case

Campus Alert Archive. "Northwestern University: Bullet casings found after a shots-fired report; 49-minute campus lockdown." Incident of February 25, 2024. Added May 2026; last updated July 2026. https://campusalertarchive.com/case/northwestern-university-shooting-threat-2024-02-25/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
shootingactive-threatshelter-in-placebullet-casingsevanstonelite-privateillinoislakefrontUnder Investigation
Added May 2026Updated July 2026Via ingestion