Campus Alert Archive
UVA

Student gunman killed three on a chartered bus; 12-hour manhunt produced 36 alerts

AI-generated · every claim is source-linked
VAactive shooteremergency notificationhigh confidence
Compare →
Confirmed Threat

A student opened fire on a chartered bus returning from a field trip, killing three football players. The shooter fled, triggering a 12-hour manhunt that produced one of the longest documented campus alert sequences, with 36 messages across SMS, email, Twitter, and the UVA Emergency website. The two-stage escalation from 'SHOTS FIRED' to 'ACTIVE ATTACKER' reflected a deliberate verification protocol. This case file documents 13 of the 36 alerts recovered from public sources; approximately 20 were repetitive shelter-in-place reminders sent roughly every 15 minutes overnight.

Alerts
12
Response
16 min
Killed
3
Injured
2
Institution
University of Virginia
Public R1 · VA
All UVA cases →
~26,000 studentsUVA Alerts
Official alert policy
Read when and how UVA says it will use UVA Alerts: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

12 messages in sequence · 12 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

INITIAL ALERTTwitter/X
Verified verbatim111 chars
UVA Alert: Shots fired reported at Culbreth Garage. Follow fire/police direction. If possible, avoid the area.
Verify this quote
@UVAPolice on X (verbatim raw t.co)x.comfind archived copies
Standard 'UVA Alert:' prefix in mixed case (sentence case), not all caps
Terse initial report: 'Shots fired reported' rather than confirming active shooter
Includes a protective directive ('avoid the area') but does not invoke Run-Hide-Fight
Sent at approximately 10:32 PM EST, 16 minutes after the first 911 call at 10:16 PM EST, a delay later criticized in the independent review for an overly cumbersome multi-level approval process
Verbatim text recovered from the UVA Police Division's official X/Twitter post; Charlottesville Tomorrow's reporting describes this alert as part of a rapid sequence of tweets, text messages, and emails pushed out simultaneously, corroborating the SMS channel label alongside the cited Twitter source
UPDATESMS+10 min
Verified verbatim84 chars
UVA Alert: ACTIVE ATTACKER firearm reported in area of Culbreth Road. RUN HIDE FIGHT
Verify this quote
UVA Department of Safety and Security verbatim post on X (Twitter)x.comfind archived copies
Escalation from 'Shots fired reported' to 'ACTIVE ATTACKER' in approximately 10 minutes
Uses 'ACTIVE ATTACKER' rather than 'ACTIVE SHOOTER', a terminology choice some institutions now prefer
Adds Run-Hide-Fight directive absent from the initial alert
Broadens location from specific garage to 'area of Culbreth Road'
Verbatim text recovered from the UVA Department of Safety and Security's official X/Twitter post; this message was also transmitted via SMS and email in the same simultaneous multi-channel push described by Charlottesville Tomorrow's reporting
UPDATETwitter/X
Verified verbatim84 chars
UVA Alert: ACTIVE ATTACKER firearm reported in area of Culbreth Road. RUN HIDE FIGHT
Verify this quote
@UVASafety on X (verbatim raw t.co)x.comfind archived copies
First explicit shelter-in-place directive
Confirms single suspect at large
Recovered from UVA Emergency Management archive node/8686
UPDATESMS
Verified verbatim152 chars
UVA Alert: UPDATE TO THE SHOOTING ON CULBRETH ROAD. 1 SUSPECT IS AT LARGE, IS CONSIDERED TO BE ARMED AND DANGEROUS. PLEASE CONTINUE TO SHELTER IN PLACE.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
Escalation: suspect now 'ARMED AND DANGEROUS'
All-caps format for severity emphasis
Recovered from UVA Emergency Management archive node/8701
UPDATESMS
Verified verbatim146 chars
UPDATE: 1 SUSPECT IS AT LARGE, CONSIDERED ARMED & DANGEROUS. CONTINUE TO SHELTER IN PLACE. REACH OUT TO FRIENDS & FAMILY TO ADVISE OF YOUR STATUS.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
'REACH OUT TO FRIENDS & FAMILY TO ADVISE OF YOUR STATUS' is an unusual and empathetic directive
Acknowledges the human dimension of an unfolding crisis, not just the tactical situation
UPDATESMS
Verified verbatim100 chars
UVA Alert: SUSPECT IS DESCRIBED AS A BLACK MALE, WEARING A BURGANDY JACKET BLUE JEANS AND RED SHOES.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
Typo preserved: 'BURGANDY' (not 'BURGUNDY'), an authenticity marker of urgent composition
Provides physical description to enable community assistance in identifying suspect
Recovered from UVA Emergency Management archive node/8706
UPDATESMS
Verified verbatim127 chars
SUSPECT IS CHRISTOPHER DARNELL JONES JR. DESCRIBED AS A BLACK MALE, WEARING A BURGANDY JACKET OR HOODIE, BLUE JEANS, RED SHOES.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
First alert naming the suspect by full name
Same 'BURGANDY' typo carried forward from the previous alert
Recovered from UVA Emergency Management archive node/8746
UPDATESMS
Verified verbatim98 chars
SUSPECT IS A B/M BURGANDY JACKET, BLUE JEANS, RED SHOES. MAY BE DRIVING A BLACK SUV VA TAG TWX3580
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
Adds vehicle description and license plate: critical escalation detail
Uses police abbreviation 'B/M' (Black/Male) rather than full description
Recovered from UVA Emergency Management archive node/8751
UPDATESMS
Verified verbatim146 chars
UVA Alert: Shelter in place remains in effect. Suspect is at large. UPD is actively searching. Monitor email for updates. Call 911 to report info.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
Transition to manhunt posture: 'suspect is at large'
Directs to email for detailed updates, acknowledging SMS length limits
One of approximately 20 periodic shelter-in-place reminders sent roughly every 15 minutes overnight
UPDATESMS
Verified verbatim160 chars
Update: UPD reported shooting resulted in 3 fatalities. 2 add'l victims are injured. Refer to UVA email and social media for more information. Shelter in place.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
First SMS confirmation of fatalities, approximately 5.5 hours after the shooting
Abbreviation 'add'l' reflects SMS character optimization
Directs to email/social for fuller information, a recurring pattern in this sequence
Recovered from UVA Emergency Management archive node/8786
UPDATEEmail+7h 28m
Verified verbatim289 chars
UVA Alert: The University of Virginia has cancelled all classes for today, Monday, Nov. 14. All University activities are also cancelled. Employees who do not provide essential services should not report to work. The shelter-in-place order remains in effect. The suspect is still at large.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
Morning administrative update: cancels classes, activities, non-essential work
Shelter-in-place maintained overnight into the next day
'Suspect is still at large' signals unresolved threat 8+ hours after incident
ALL CLEARSMS+12h 1m
Verified verbatim172 chars
UVA Alert: A suspect is in custody. The UVA shelter-in-place has been lifted. Thank you for your patience and cooperation during this time. Further information will follow.
Verify this quote
UVA Emergency Alert Archiveuvaemergency.virginia.edufind archived copies
12 hours from first alert to all-clear
'Thank you for your patience and cooperation' provides emotional acknowledgment
This case file documents 13 of the 36 total alerts; approximately 20 were repetitive shelter-in-place reminders sent roughly every 15 minutes overnight
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

UVA Alert: Shots fired reported at Culbreth Garage. Follow fire/police direction. If possible, avoid the area.

  • Sourcepresent25/25

    Final assessment

    Unanimous: the branded 'UVA Alert' signature identifies the sender.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. present: 'UVA Alert'
    2. present: UVA Alert is the branded signature identifying the sender.
    3. present: Signed 'UVA Alert'
    4. present: 'UVA Alert' identifies the sending alert system.
    5. present: 'UVA Alert' branded signature
    6. present: Signed 'UVA Alert'.
    7. present: Signed 'UVA Alert'.
    8. present: Branded 'UVA Alert' signature.
    9. present: 'UVA Alert'
    10. present: 'UVA Alert' branded signature.
    11. present: UVA Alert
    12. present: 'UVA Alert' is the branded sender signature.
    13. present: 'UVA Alert' branded signature.
    14. present: Signed "UVA Alert".
    15. present: 'UVA Alert'
    16. present: Branded 'UVA Alert'.
    17. present: Branded 'UVA Alert'
    18. present: 'UVA Alert' branded signature identifies sender.
    19. present: 'UVA Alert' signature.
    20. present: Branded "UVA Alert" signature.
    21. present: 'UVA Alert' branded signature identifies sender.
    22. present: 'UVA Alert' branded signature.
    23. present: 'UVA Alert' branded signature.
    24. present: UVA Alert
    25. present: 'UVA Alert' branded signature.
  • Hazardpresent25/25

    Final assessment

    Unanimous: 'Shots fired' names the specific hazard.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: 'Shots fired reported'
    2. present: Reports shots fired as the specific hazard.
    3. present: 'Shots fired' names the hazard
    4. present: States 'Shots fired reported'.
    5. present: 'Shots fired reported'
    6. present: 'Shots fired'.
    7. present: Names 'Shots fired'.
    8. present: 'Shots fired' names the specific hazard.
    9. present: 'Shots fired reported'
    10. present: 'Shots fired' named.
    11. present: Shots fired reported
    12. present: 'Shots fired' names the specific hazard.
    13. present: 'Shots fired' named.
    14. present: "Shots fired reported".
    15. present: 'Shots fired reported'
    16. present: 'Shots fired'.
    17. present: 'Shots fired reported'
    18. present: 'Shots fired' names the hazard.
    19. present: 'Shots fired reported'.
    20. present: States "Shots fired".
    21. present: 'Shots fired' names the hazard.
    22. present: 'Shots fired' names the hazard.
    23. present: 'Shots fired' names hazard.
    24. present: Shots fired reported
    25. present: 'Shots fired' names the hazard.
  • Locationpresent25/25

    Final assessment

    Unanimous: 'Culbreth Garage' names the specific location.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: 'at Culbreth Garage'
    2. present: Names Culbreth Garage as the location.
    3. present: 'Culbreth Garage'
    4. present: Names 'Culbreth Garage'.
    5. present: 'at Culbreth Garage'
    6. present: 'at Culbreth Garage'.
    7. present: Gives 'Culbreth Garage'.
    8. present: 'at Culbreth Garage' names the location.
    9. present: 'at Culbreth Garage'
    10. present: Culbreth Garage named.
    11. present: Culbreth Garage
    12. present: 'Culbreth Garage' gives the location.
    13. present: 'Culbreth Garage' given.
    14. present: "Culbreth Garage".
    15. present: 'at Culbreth Garage'
    16. present: 'Culbreth Garage'.
    17. present: 'Culbreth Garage'
    18. present: 'Culbreth Garage'.
    19. present: 'Culbreth Garage'.
    20. present: Specifies "Culbreth Garage".
    21. present: 'Culbreth Garage' names location.
    22. present: 'at Culbreth Garage'.
    23. present: 'Culbreth Garage' given.
    24. present: Culbreth Garage
    25. present: 'at Culbreth Garage.'
  • Guidancepresent25/25

    Final assessment

    Unanimous: 'Follow fire/police direction' and 'avoid the area' instruct recipients.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: 'Follow fire/police direction. If possible, avoid the area'
    2. present: Tells recipients to follow fire and police direction and avoid the area.
    3. present: 'Follow fire/police direction. If possible, avoid the area'
    4. present: Instructs to 'Follow fire/police direction' and 'avoid the area'.
    5. present: 'Follow fire/police direction'/'avoid the area'
    6. present: 'Follow fire/police direction... avoid the area'.
    7. present: Instructs to 'Follow fire/police direction' and 'avoid the area'.
    8. present: 'Follow fire/police direction...avoid the area'.
    9. present: 'Follow fire/police direction... avoid the area'
    10. present: 'Follow fire/police direction... avoid the area'.
    11. present: Follow fire/police direction. If possible, avoid the area
    12. present: 'Follow fire/police direction. If possible, avoid the area' instructs recipients.
    13. present: 'Follow fire/police direction... avoid the area'.
    14. present: "Follow fire/police direction. If possible, avoid the area".
    15. present: 'Follow fire/police direction...avoid the area'
    16. present: 'Follow fire/police direction' and 'avoid the area'.
    17. present: 'Follow fire/police direction...avoid the area'
    18. present: 'Follow fire/police direction... avoid the area'.
    19. present: 'Follow fire/police direction... avoid the area.'
    20. present: Instructs to "Follow fire/police direction" and "avoid the area".
    21. present: 'Follow fire/police direction...avoid the area' is guidance.
    22. present: 'Follow fire/police direction. If possible, avoid the area.'
    23. present: 'Follow fire/police direction... avoid the area'.
    24. present: Follow fire/police direction, avoid the area
    25. present: 'Follow fire/police direction... avoid the area.'
  • Timeabsent0/25

    Final assessment

    Unanimous: no clock time, date, or recency marker is given.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency word given
    2. absent: No clock time, date, or word like now conveying when this occurred.
    3. absent: No clock time or recency marker given
    4. absent: No clock time or date given.
    5. absent: No clock time or recency marker
    6. absent: No clock time, date, or recency marker present.
    7. absent: No clock time or recency marker given.
    8. absent: No specific time or recency marker given.
    9. absent: No clock time or recency marker given
    10. absent: No clock time or recency marker given.
    11. absent: No specific time or recency indicator given
    12. absent: No clock time or recency marker given.
    13. absent: No clock time or date given.
    14. absent: No clock time, date, or recency term given.
    15. absent: No clock time or recency word given
    16. absent: No clock time or date given.
    17. absent: No clock time given
    18. absent: No clock time, date, or recency word given.
    19. absent: No clock time or date given.
    20. absent: No clock time or date given.
    21. absent: No clock time, date, or recency term given.
    22. absent: No clock time, date, or recency term given.
    23. absent: No clock time, date, or recency term given.
    24. absent: No time reference given
    25. absent: No clock time or specific recency marker given.
  • Impactabsent0/25

    Final assessment

    Unanimous: no stated harm or severity beyond naming that shots were fired.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: No stated consequence beyond naming shots fired
    2. absent: No statement of potential harm or danger is included.
    3. absent: No stated harm or severity
    4. absent: No stated consequence beyond naming shots fired.
    5. absent: No stated harm or severity beyond naming the hazard
    6. absent: No stated consequence or severity described.
    7. absent: No stated consequence or severity.
    8. absent: No stated potential harm beyond naming the shots fired.
    9. absent: No stated consequence beyond hazard name
    10. absent: No stated consequence given.
    11. absent: No stated consequence beyond naming the shots fired
    12. absent: No stated consequence given.
    13. absent: No stated harm or severity described.
    14. absent: No stated harm or severity.
    15. absent: No stated consequence beyond hazard name
    16. absent: No stated consequence.
    17. absent: No stated consequence given
    18. absent: No stated consequence or severity.
    19. absent: No stated harm or severity.
    20. absent: No stated consequence or severity beyond hazard name.
    21. absent: No stated consequence or severity described.
    22. absent: No stated harm or severity conveyed.
    23. absent: No stated consequence or severity.
    24. absent: No stated consequence
    25. absent: No stated harm or severity conveyed.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

The UVA shooting produced one of the most extensive documented campus alert sequences in history. The 36 messages across 12 hours (roughly one every 15 minutes) illustrate the communication challenge of an extended manhunt across SMS, email, Twitter, and the UVA Emergency website. This case file documents 13 of the 36 alerts recovered from public sources; approximately 20 were repetitive shelter-in-place reminders sent at regular intervals overnight. The two-stage escalation from 'SHOTS FIRED' to 'ACTIVE ATTACKER' (with a 4-minute gap) reflects the tension between speed and accuracy. Subsequent alerts show progressive information escalation: suspect description (with the preserved 'BURGANDY' typo), suspect name, vehicle description with license plate, fatality count, and finally the all-clear. The independent review later concluded that even the initial alert was delayed; the 16-minute gap between the first 911 call and the first alert was attributed to the time needed to confirm the threat. Three football players, Devin Chandler, Lavel Davis Jr., and D'Sean Perry, were killed. The shooter, a former football player, was found the following morning in Henrico County.
Analysis

Key Findings

36 alerts over 12 hours represents one of the longest documented campus alert sequences
Two-stage escalation (SHOTS FIRED to ACTIVE ATTACKER) reflects deliberate verification protocol
16-minute gap between 911 call and first alert was later criticized by an independent review as too long
'BURGANDY' typo in suspect description carried forward across multiple alerts, an authenticity marker of urgent composition
Progressive information escalation: shots fired, active attacker, suspect description, suspect name, vehicle/plate, fatalities, all-clear
'REACH OUT TO FRIENDS & FAMILY TO ADVISE OF YOUR STATUS' is an unusually empathetic directive in a tactical alert
Approximately 20 overnight alerts were repetitive shelter-in-place reminders sent roughly every 15 minutes
Outcome
Suspect apprehended the following morning in Henrico County. The gunman, Christopher Darnell Jones Jr., pleaded guilty to three counts of first-degree murder in November 2024 and was sentenced in November 2025 to five life terms plus 23 years. An independent review found the initial alert should have been sent sooner; it went out 16 minutes after the first 911 call.
Reception

Community Response

How the campus community received and interpreted the alert(s), in their own words.

Poorly received

Independent reviews concluded UVA "waited too long" (about 16 minutes after the first 911 call) to issue the first UVA Alert, with the external review saying the delay subjected the community to "preventable risk," and students describing being unaware a shooter was loose for hours.

“That elapsed period of time is too long given the timeline of most active shooting incidents and could have resulted in University community members being subject to preventable risk by unknowingly continuing to move freely around Grounds despite the presence of an active shooter”
— Vinson & Elkins external review report· Charlottesville TomorrowView source
“It's scary to think that a shooter was loose in my city for so long and I had no idea”
— Paige Robinson, UVA student· UVA MagazineView source

Reactions to the alert, drawn from press coverage; follow each link to verify. Quotes are reproduced from reporting and not independently re-confirmed against the original source.

Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. Official
    UVA Emergency Alert Archive
    uvaemergency.virginia.edu
    archived copy
  2. Report
    Independent Review (commissioned by UVA)
    news.virginia.edu
    archived copy
  3. Official
    @UVAPolice on X
    x.com
    archived copy
  4. Official
    @UVASafety on X (verbatim raw t.co)
    x.com
    archived copy
Cite this case

Campus Alert Archive. "University of Virginia: Student gunman killed three on a chartered bus; 12-hour manhunt produced 36 alerts." Incident of November 13, 2022. Added March 2026; last updated July 2026. https://campusalertarchive.com/case/uva-shooting-2022-11-13/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
active-shootermanhuntovernightextended-sequencerun-hide-fighttwo-stage-escalationfootball-players2022
Added March 2026Updated July 2026Via manual