Campus Alert Archive
UNC

One Minute From 911 to Siren, Three Hours to All-Clear: The Full Alert Carolina Lifecycle

NCactive shooteremergency notificationhigh confidence
Confirmed Threat

A graduate student shot and killed faculty member Zijie Yan in Caudill Laboratories. Alert Carolina activated within one minute of the 911 call, among the fastest documented campus response times. But the lockdown stretched over three hours as the suspect fled and was eventually captured off-campus. A CNA Corporation after-action review found that 49.5% of respondents rated the update alerts 'not useful or only slightly useful' due to vague location language.

Alerts
4
Response
1 min
Killed
1
Injured
0
Institution
University of North Carolina at Chapel Hill
Public R1 · NC
~32,000 studentsAlert Carolina
Confirmed Timeline

Alert Sequence

4 messages in sequence · 4 verified verbatim

INITIAL ALERTSMS
Verified verbatim@UNCPolice X/Twitter (verbatim cross-post of the Alert Carolina SMS)100 chars
!Alert Carolina! Emergency: Armed, dangerous person on or near campus. Go inside now; avoid windows.
One minute from 911 call to alert, among the fastest documented campus notifications
Exclamation marks bracket 'Alert Carolina' as a branding and attention signal
'On or near campus' was later criticized as too vague to support informed protective decisions
'Go inside now' is a clear directive but lacks Run-Hide-Fight language
'Avoid windows' is a specific protective action rarely seen in initial active shooter alerts
UPDATESMS+12 min
Verified verbatimAlert Carolina notification archive page (page title is the verbatim text)111 chars
!Alert Carolina! Emergency – Update: Remain sheltered in place. This is an ongoing situation. Suspect at large.
Confirms the situation is ongoing and the suspect has not been found
'Suspect at large' introduces the possibility that the threat could move anywhere on campus
Still provides no specific location information about where the shooting occurred
49.5% of respondents later rated update alerts like this one as 'not useful or only slightly useful'
The em-dash separator after 'Emergency' is preserved exactly as published in the Alert Carolina archive
UPDATESMS+2h 11m
Verified verbatimAlert Carolina notification archive page (page title is the verbatim text)117 chars
!Alert Carolina! Emergency–Update: Stay sheltered in place until all clear. All classes & events cancelled for today.
Sent at approximately 3:14 PM EDT on August 28, 2023, roughly 36 minutes after Tailei Qi was taken into custody at about 2:38 PM EDT
Despite the suspect being in custody, the message continues to direct community members to shelter in place until the formal all-clear
Uses an en-dash between 'Emergency' and 'Update' (different punctuation from sequence 2's em-dash) and an ampersand in 'classes & events'
Combines protective directive (shelter in place) with operational guidance (classes & events cancelled) in a single 116-character SMS
The shelter-in-place directive remained active for approximately another 60 minutes until the 4:14 PM all-clear
ALL CLEARSMS+3h 11m
Verified verbatimAlert Carolina notification archive page (page slug and title preserve the verbatim alert)79 chars
UNC Issues All Clear. Classes canceled remainder of the day. Avoid Caudill Labs
Issued at 4:14 p.m. EDT, over three hours after the initial alert
'Avoid Caudill Labs' finally names the specific building — the only alert in the chain to do so, addressing later AAR criticism
Combines all-clear with operational guidance (classes canceled) in a single message
85% of respondents found the all-clear notification useful for safety decisions
Context

Background

The UNC Chapel Hill shooting on August 28, 2023 killed faculty member Zijie Yan in Caudill Laboratories. The one-minute response time from 911 call to first alert was a benchmark for the industry. Yet the CNA Corporation's independent after-action review revealed a paradox: speed is necessary but insufficient. Nearly half of respondents rated the update alerts as not useful, primarily because the location language ('on or near campus') was too vague to support informed protective decisions. The suspect, graduate student Tailei Qi, was captured off-campus approximately 90 minutes after the shooting, but the full all-clear did not come until 4:15 p.m., over three hours after the initial alert. UNC has since updated its alert language to include explicit Run-Hide-Fight instructions, addressing the review's finding that the initial alert lacked actionable guidance beyond 'go inside.' Outdoor sirens activated simultaneously with SMS, providing multi-channel delivery.
Analysis

Key Findings

One-minute response time from 911 call to first alert sets an industry benchmark
49.5% of respondents rated updates 'not useful or only slightly useful' due to vague location language
'On or near campus' was too vague to support protective action decisions
No Run-Hide-Fight in initial alert; UNC has since added it to their templates
Three-hour gap between initial alert and all-clear despite suspect captured within 95 minutes
Outcome
Suspect Tailei Qi captured off-campus approximately 90 minutes after the shooting. One faculty member killed.
Provenance

Sources

  1. Official
    Alert Carolina Archive
    alertcarolina.unc.edu
  2. Report
    CNA Corporation After-Action Review
  3. Student Paper
    The Daily Tar Heel, Armed person on UNC campus now in police custody
    dailytarheel.com
  4. News
    WUNC live updates: UNC alert
    wunc.org
Tags
active-shooterfastest-responseafter-action-reviewvague-languagerun-hide-fight-absentsirensextended-lockdownsuspect-captured2023
Added April 2026Updated May 2026Via ingestion