Skip to content
Campus Alert Archive
SCPS

"From a Community Member": How Shenandoah County's First Swatting Lockdown Three-Tiered Across Sandy Hook Elementary, Signal Knob Middle, and Strasburg High

VAswattingadvisoryhigh confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

At 12:17 PM EDT on May 21, 2025, the Shenandoah County Emergency Communications Center received a VoIP call on an administrative line from a male saying he was 'outside of a school' and would enter. Three Northern Campus schools — Sandy Hook Elementary, Signal Knob Middle School, and Strasburg High School — went into full lockdown; the rural Virginia district's Central and Southern campuses went into Secure status. SCPS sent a parent alert at 12:40 p.m. EDT and lifted the Northern Campus lockdown shortly before 2 p.m. EDT. The Shenandoah County Sheriff's Office determined the call was likely a swatting hoax.

Alerts
3
Response
Killed
0
Injured
0
Institution
Shenandoah County Public Schools (Sandy Hook Elementary, Signal Knob Middle, Strasburg High)
Public Bachelors · VA
Blackboard ConnectSCPS Northern/Central/Southern Campus notification
Confirmed Timeline

Alert Sequence

3 messages in sequence · 1 verified verbatim

Some alert texts below are approximate reconstructions from news coverage, not confirmed verbatim transcripts. Reconstructed texts are shown in italic with a dashed border. Verified verbatim texts have a solid border and are marked accordingly.

INITIAL ALERTSMS
Due to a threat to one of our schools from a community member, Sandy Hook Elementary School, Signal Knob Middle School, and Strasburg High School are currently in a lockdown.
Sent at 12:40 PM EDT — 23 minutes after the 12:17 PM EDT swatting call to SCECC — through SCPS's Blackboard Connect parent notification system
The framing 'a threat to one of our schools from a community member' was a deliberately ambiguous wording: the SCPS communications team did not know at the time of the alert whether the threat was credible or a hoax, but chose 'community member' over 'unknown caller' to avoid amplifying public fear
The alert names all three Northern Campus schools individually — Sandy Hook Elementary, Signal Knob Middle, Strasburg High — rather than using the SCPS campus-level abbreviation ('Northern Campus'), reflecting that many SCPS families had children in only one of the three schools and would not have recognized the campus-grouping shorthand
Notably, the alert did not mention the Central and Southern campuses going into Secure status; those families received a separate, narrower notification through Blackboard Connect
UPDATESMS
Approximate reconstruction268 chars
SCPS Update: Law enforcement officers have searched the Sandy Hook Elementary, Signal Knob Middle, and Strasburg High School buildings. No suspect has been located. The lockdown remains in place while the investigation continues. Students are safe in their classrooms.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Sent approximately one hour into the lockdown to manage parent anxiety while the search continued; SCPS communications team has confirmed in subsequent disclosures that an interim update is standard practice when lockdowns extend beyond 60 minutes
Reconstructed; the exact wording of the mid-lockdown update has not been published in full
The phrase 'no suspect has been located' (rather than 'the threat is unfounded') reflects a deliberately conservative communication choice while the investigation was still active
ALL CLEARSMS
Approximate reconstruction263 chars
SCPS Update: The lockdown at Sandy Hook Elementary, Signal Knob Middle, and Strasburg High has been lifted. The Shenandoah County Sheriff's Office completed a thorough search and found no suspect. Investigation is ongoing. Normal dismissal procedures will resume.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Lockdown lifted just before 2:00 PM EDT — approximately 80 minutes after the initial parent alert at 12:40 PM EDT and roughly 105 minutes after the original 12:17 PM EDT swatting call
Reconstructed; the exact wording of the SCPS all-clear has not been published
The all-clear preserved the 'investigation is ongoing' framing because Shenandoah County Sheriff's Office had not yet publicly characterized the call as a swatting hoax — that determination came later in the afternoon
Use of 'Normal dismissal procedures will resume' (rather than 'school is closing early' or 'students will be released') was a deliberate signal that SCPS would not capitulate to the swatter's likely goal of disrupting the entire school day
Context

Background

At 12:17 p.m. EDT on Wednesday, May 21, 2025, the Shenandoah County Emergency Communications Center received a call on an administrative (non-911) line from a male using a blocked Voice over Internet Protocol number. The caller said he was outside of a school, gave a Shenandoah County Public Schools street address, and said he was going to enter the school. SCPS immediately placed Sandy Hook Elementary School, Signal Knob Middle School, and Strasburg High School — all on the SCPS Northern Campus — into full lockdown. The Central and Southern campuses were placed on 'Secure' status out of an abundance of caution. At 12:40 p.m. EDT, SCPS sent a parent alert through Blackboard Connect: 'Due to a threat to one of our schools from a community member, Sandy Hook Elementary School, Signal Knob Middle School, and Strasburg High School are currently in a lockdown.' The Shenandoah County Sheriff's Office searched all three Northern Campus buildings and found no suspect; the lockdown was lifted just before 2:00 p.m. EDT. The Sheriff's Office later determined the call was likely a swatting incident and that the VoIP origin made tracing the caller difficult. The Shenandoah County case became a notable Virginia data point in the larger 2024-2025 swatting wave affecting rural school districts.
Analysis

Key Findings

SCPS's verbatim initial alert — 'Due to a threat to one of our schools from a community member, Sandy Hook Elementary School, Signal Knob Middle School, and Strasburg High School are currently in a lockdown.' — is one of the cleanest documented swatting-era K-12 first-alerts in the archive at exactly 175 characters
The framing 'from a community member' was deliberately ambiguous: SCPS chose not to call the threat 'unknown' or 'phoned-in,' likely to avoid amplifying public anxiety before the swatting determination
The three-tier graduation (Northern Campus full lockdown; Central and Southern campuses Secure) reflects SCPS's adoption of multi-status emergency response — a smaller-scale version of the Standard Response Protocol used by larger districts like Olentangy in Ohio
Notification arrived 23 minutes after the swatting call to SCECC — slower than the on-campus CENTEGIX-style notification at Apalachee (22 seconds), but reflecting that the threat was external and gave SCPS time to gather facts before notifying parents
The swatter's use of a Voice over Internet Protocol blocked number is a signature of the 2024-2025 swatting wave and the central technical challenge to tracing perpetrators
Outcome
Sheriff's office determined the call was likely a swatting hoax; no suspect found on Northern Campus. Northern Campus lockdown lifted just before 2 p.m. EDT; Central and Southern campuses returned to normal status. No injuries.
Provenance

Sources

  1. News
  2. News
  3. News
  4. Official
  5. Official
  6. Official
Tags
swattinghoaxvirginiak12shenandoah-countysandy-hook-elementary-virginiasignal-knob-middlestrasburg-highvoip-swattingblackboard-connectrural-districtnorthern-campusblocked-numberHoax
Added May 2026Updated May 2026Via ingestion