United Airlines Flight 811
United Airlines Flight 811 was a regularly scheduled airline flight from Los Angeles to Sydney, with intermediate stops at Honolulu and Auckland. On February 24, 1989, the Boeing 747-122 serving the flight experienced a cargo-door failure in flight shortly after leaving Honolulu. The resulting explosive decompression blew out several rows of seats, killing nine passengers. The aircraft returned to Honolulu and landed with no further incident.
N4713U after the cargo door tore off in flight, causing an explosive decompression and ejecting nine people from the plane | |
| Accident | |
|---|---|
| Date | February 24, 1989 |
| Summary | Cargo door failure due to design flaw leading to explosive decompression[1] |
| Site | Pacific Ocean near Honolulu, Hawaii 20°41′24″N 158°40′30″W / 20.690°N 158.675°W |
| Aircraft | |
| Aircraft type | Boeing 747-122 |
| Operator | United Airlines |
| IATA flight No. | UA811 |
| ICAO flight No. | UAL811 |
| Call sign | UNITED 811 |
| Registration | N4713U |
| Flight origin | Los Angeles International Airport, Los Angeles, California, U.S. |
| 1st stopover | Honolulu International Airport Honolulu, Hawaii, U.S. |
| 2nd stopover | Auckland Airport Auckland, New Zealand |
| Destination | Sydney Airport Sydney, Australia |
| Occupants | 355 |
| Passengers | 337 |
| Crew | 18 |
| Fatalities | 9 |
| Injuries | 38 |
| Survivors | 346 |
Aircraft edit
The aircraft involved was a Boeing 747-122 (registration number N4713U).[2] It was delivered to United Airlines on November 3, 1970.[3] It was the 89th 747 built. At the time of the accident, the Boeing had accumulated 58,814 total flight hours, 15,028 flight 'pressurization' cycles,[4] and had not been involved in any previous accidents.[2]
On February 24, 1989, the aircraft was scheduled by United Airlines to operate as Flight 811 from Los Angeles International Airport in Los Angeles, California, to Sydney Airport in Mascot, New South Wales, Australia, with intermediate stops at Honolulu International Airport in Honolulu, Hawaii, and Auckland Airport in Auckland, New Zealand.[2] Flight 811 operated without incident on the first leg of the flight from Los Angeles to Honolulu and no difficulties were reported by the flight crew upon arriving at Honolulu, where a crew change occurred.[2]
After the accident, the aircraft was repaired and put back into service with United, but was re-registered as N4724U. In 1997, the aircraft was taken out of service and passed onto Air Dabia as C5-FBS. Air Dabia ceased operations in 1998, and the aircraft was abandoned at Plattsburgh International Airport, where it was scrapped in 2004.[5][6]
Flight crew edit
Starting in Honolulu, Flight 811 was under Captain David M. "Dave" Cronin (age 59).[1]: 101 At the time of the accident, Cronin had logged around 28,000 flight hours, including roughly 1,600 hours in Boeing 747 aircraft.[1]: 101 Flight 811 was Cronin's penultimate scheduled flight before his mandatory retirement.[7]
The remaining flight crew consisted of First Officer Gregory Allen "Al" Slader (48), and Flight Engineer Randal Mark Thomas (46), and 15 flight attendants.[1]: 101–103 The first officer and flight engineer had logged 14,500 flight hours and 20,000 flight hours, respectively.[1]: 101–102
Accident edit
| Nationality | Fatalities |
|---|---|
| United States | 6 |
| Australia | 2 |
| New Zealand | 1 |
Flight 811 took off from Honolulu International Airport at 01:52 local time, with 337 passengers and 18 crew members on board.[1]: 1–2 During the climb, the crew made preparations to detour around thunderstorms along the plane's track; the captain anticipated turbulence and kept the passenger seatbelt sign lit.[1]: 2
The aircraft had been flying for 17 minutes,[1]: 25 as it was passing from 22,000 to 23,000 feet (6,700 to 7,000 m), when the flight crew heard a loud "thump", which shook the plane.[1]: 2 About a second and a half later, the forward cargo door blew off. It swung out with such force that it tore a hole in the fuselage. Pressure differentials and aerodynamic forces caused the cabin floor to cave in, and 10 seats (G and H of rows 8 through 12) were ejected from the cabin.[1]: 8 [9] All eight passengers seated in these locations were ejected from the aircraft, as was the passenger in seat 9F. Seats 8G and 12G were unoccupied.[1]: 109 [9] A gaping hole was left in the aircraft, through which a flight attendant, Mae Sapolu in the business-class cabin, was almost blown out. Purser Laura Brentlinger hung on to the steps leading to the upper deck, and was dangling from them when the decompression occurred. Passengers and crew members saw her clinging to a seat leg and were able to pull her back inside the cabin, although she was severely injured.[9]
The pilots initially believed that a bomb had gone off inside the airliner, as this accident happened just two months after Pan Am Flight 103 was blown up over Lockerbie, Scotland. They began an emergency descent to reach an altitude where the air was breathable, while also performing a 180° left turn to fly back to Honolulu.[1]: 2 The explosion damaged components of the on-board emergency oxygen supply system, as it was primarily located in the forward cargo sidewall area, just aft of the cargo door.[1]: 8
The debris ejected from the aircraft during the explosive decompression damaged the Number 3 and 4 engines.[1]: 4–8 Engine 3 was experiencing heavy vibration, no N1 tachometer reading, and a low exhaust-gas temperature (EGT) and engine-pressure ratio, so the crew shut it down.[1]: 2 At 02:20, an emergency was declared and the crew began dumping fuel to reduce the aircraft landing weight.[1]: 2 The N1 reading of engine number 4 soon fell to almost zero, its EGT reading was high, and it was emitting flames, so they shut it down.[1]: 2 Some of the explosively ejected debris damaged the right wing's leading edge, dented the horizontal stabilizer on that side, and damaged the vertical stabilizer.[1]: 4
During the descent, Captain Cronin ordered Flight Engineer Thomas to tell the flight attendants to prepare for an emergency landing, but he was unable to contact them through the intercom. He asked the captain for permission to go down to find out what was happening, and he agreed. Thomas saw severe damage immediately upon leaving the cockpit; the aircraft skin was peeled off in some areas on the upper deck, revealing the frames and stringers. As he went down to the lower deck, the magnitude of the damage became apparent as he saw the large hole in the side of the cabin. He returned to the cockpit and reported that a large section of the fuselage was open aft of the Number 1 exit door. He concluded that it was probably a bomb, and that considering the damage, exceeding the plane's stall speed by more than a small margin would be unwise.[9]
As the airliner neared the airport, the landing gear was extended. The flaps could only be partially deployed as a result of damage sustained following the decompression.[1]: 3 This required a higher than normal landing speed around 190–200 knots (220–230 mph; 350–370 km/h).[1]: 3 Captain Cronin was able to bring the aircraft to a halt without overrunning the runway.[9] About 14 minutes had elapsed since the emergency was declared. All the remaining passengers and flight attendants exited the aircraft in less than 45 seconds. Every flight attendant suffered some injury during the evacuation, ranging from scratches to a dislocated shoulder.[1]: 108–109
Despite extensive air and sea searches, no remains of the nine victims lost in flight were found at sea.[1]: 4 Multiple small body fragments and pieces of clothing were found in the Number 3 engine, indicating that at least one victim ejected from the fuselage was ingested by the engine, but whether the fragments were from one or more victims was not known.[10]
Investigation edit
NTSB initial investigation edit
The National Transportation Safety Board (NTSB) immediately commenced an investigation into the accident. An extensive air and surface search of the ocean had initially failed to locate the aircraft's cargo door.[11]: 22 Though they were not able to inspect the cargo door, the NTSB proceeded with its investigation, and issued its final report on April 16, 1990.[11]: 22
The NTSB looked to circumstantial evidence, including prior incidents that involved cargo doors. In 1987, Pan Am Flight 125, another Boeing 747, outbound from London Heathrow Airport, encountered pressurization problems at 20,000 feet (6,100 m), causing the crew to abort the flight and return to the airport.[1]: 57 [12] After the safe landing, the aircraft's cargo door was found to be ajar by about 1.5 inches (3.8 cm) along its ventral edge. When the aircraft was examined in a maintenance hangar, all of the locking arms were found to be either damaged or entirely sheared off. Boeing initially attributed this to mishandling by ground crew. To test this concern, Boeing instructed 747 operators to shut and lock the cargo door with the external handle, and then activate the door-open switch with the handle still in the locked position. Since the S-2 switch was designed to deactivate the door motors if the handle was locked, nothing should have happened. Some of the airlines reported the door motors did indeed begin running, attempting to force the door open against the locking sectors and causing damage to the mechanism.[9]
Based on the evidence available, and the attribution of prior cargo-door malfunctions to damage and ground crew mishandling, the NTSB operated from an assumption that a properly latched and locked 747 cargo door could not open in flight:[11]: 37
There are no reasonable means by which the door locking and latching mechanisms could open mechanically in flight from a properly closed and locked position. If the lock sectors were in proper condition, and were properly situated over the closed latch cams, the lock sectors had sufficient strength to prevent the cams from vibrating to the open position during ground operation and flight. However, there are two possible means by which the cargo door could open while in flight. Either, the latching mechanisms were forced open electrically through the lock sectors after the door was secured, or the door was not properly latched and locked before departure. Then the door opened when the pressurization loads reached a point that the latches could not hold.
The NTSB learned that in N4713U's case, the aircraft had experienced intermittent malfunctions of its forward cargo door in the months prior to the accident.[11]: 51 Based on this information, the NTSB concluded in its April 1990 report that these malfunctions had damaged the door locking mechanism in a way that caused the door to show a latched and locked indication, without being fully latched and locked.[11]: 52 Thus, the NTSB attributed the accident to human error by the ground crew.[failed verification] Based on this hypothesis of in-service damage, the NTSB also faulted the airline for improper maintenance and inspection due to its failure to identify the damaged locking mechanism.[11]: 51 Focusing on damage to the door and maintenance procedures, the NTSB concluded that the accident was preventable human error, and not a problem inherent in the design or function of the aircraft's cargo door.
Personal investigation and later developments edit
Lee Campbell, a New Zealander returning home, was one of the fatalities on Flight 811. After his death, his parents Kevin and Susan Campbell (the former an engineer by trade) investigated the case using documents obtained from the NTSB.[13] The Campbells' investigation led them to conclude that the cause of the accident was not human error, but rather the combination of an electrical problem and an inadequate design of the aircraft's cargo door-latching mechanism. They later presented their theory to the safety board.[14]
The Boeing 747 was designed with an outward-hinging door, unlike a plug door which opens inward and jams against its frame as the pressure drops outside, making accidental opening at high altitude impossible. The outward-swinging door increases the cargo capacity, but requires a strong locking mechanism to keep it closed. Deficiencies in the design of wide-body aircraft cargo doors were known since the early 1970s from flaws in the DC-10 cargo door.[15][16] These problems were not fully addressed by the aircraft industry or the FAA, despite the warnings and deaths from the DC-10 accidents[17] and attempts by Boeing to solve the problems in the 1970s.[failed verification]
The 747's cargo door used a series of electrically operated latch cams into which the door-edge latch pins closed. The cams then rotated into a closed position, holding the door closed. A series of L-shaped arms (called locking sectors) were actuated by the final manual moving of a lever to close the door; these were designed to reinforce the unpowered latch cams and prevent them from rotating into an unlocked position. The locking sectors were made out of aluminum, and they were too thin to be able to keep the latch cams from moving into the unlocked position against the power of the door motors. Electrical switches cut electrical power to the cargo door when the outer handle was closed; however, if one of those were faulty, the motors could still draw power and rotate the latch cam to the open position. The same event could happen if frayed wires were able to power the cam motor, even if the circuit power was cut by the safety switch.[9]
As early as 1975, Boeing realized that the aluminum locking sectors were too thin to be effective, and recommended the airlines to add doublers to the locking sectors. After the 1987 Pan Am incident, Boeing issued a service bulletin notifying operators to replace the aluminum locking sectors with steel locking sectors, and to carry out various inspections.[11]: 22–23 In the United States, the FAA mandated this service by means of an airworthiness directive in July 1988 and gave U.S. airlines 18 to 24 months to comply with it.[1]: 23 After the Flight 811 accident, the FAA shortened the time to 30 days.[9]
NTSB investigation reopened edit
On September 26 and October 1, 1990, two halves of Flight 811's cargo door were recovered by the manned deep-sea submersible Sea Cliff from the Pacific Ocean from 14,100 feet (4,300 m) below the ocean surface. The cargo door had fractured lengthwise across the center. Recovery crews reported that no other debris or evidence of human remains had been discovered.[18] The NTSB inspected the cargo door and determined that the condition of the locking mechanism did not support its original conclusions.[1]: vi
Additionally, in 1991, an incident occurred at New York's John F. Kennedy International Airport involving the malfunction of a United Airlines Boeing 747 cargo door.[19] At the time, United Airlines' maintenance staff was investigating the cause of a circuit-breaker trip. In the process of diagnosing the cause, an inadvertent operation of the electric door latch mechanism caused the cargo door to open spontaneously despite being closed. An inspection of the door's electrical wiring discovered insulation breaches, and isolating certain electrical wires allowed the door to operate normally again.[1]: 66–68 The lock sectors, latch cams, and latch pins on the door were inspected, and did not show any signs of damage of the type predicted by the NTSB's original hypothesis.[1]: 68
Final conclusions edit
Based on developments after it issued its original report in April 1990, the NTSB issued a superseding accident report on March 18, 1992.[1]: 1–2 In this report, the NTSB determined that the probable cause of the accident was the sudden opening of the cargo door, which was attributed to improper wiring and deficiencies in the door's design. It appeared in this case that a short circuit caused an unordered rotation of the latch cams, which forced the weak locking sectors to distort and allow the rotation, thus enabling the pressure differential and aerodynamic forces to blow the door off the fuselage; ripping away the hinge fixing structure, the cabin floor, and the side fuselage skin; and causing the explosive decompression.[9]
Outcomes edit
The NTSB issued a recommendation for all 747-100s in service at the time to replace their cargo door latching mechanisms with new, redesigned locks.[1] A subrecommendation suggested replacing all outward-opening doors with inward-opening doors, which cannot open in flight due to the pressure differential. No similar accidents leading to loss of life have officially occurred on this aircraft type.[citation needed]
In 1989, the flight crew received the Secretary's Award for Heroism for their actions.[20] The aircraft was repaired, re-registered as N4724U in 1989, and returned to service with United Airlines in 1990. In 1997, the aircraft was registered with Air Dabia as C5-FBS,[21] and after that airline's collapse, abandoned in 2001 during overhaul maintenance at Plattsburgh International Airport.[5] In 2004, the aircraft was scrapped for spare parts.[citation needed]
In popular culture edit
The events of Flight 811 were featured in "Unlocking Disaster", the season-one (2003) and first episode of the long-running Canadian TV series Mayday[9] (called Air Emergency and Air Disasters in the U.S. and Air Crash Investigation internationally), which included interviews with survivors and a dramatization of the accident. The flight was also included in a Mayday season-six (2007) Science of Disaster special titled "Ripped Apart".[13] This will be covered again in upcoming season 24, episode 1 of Mayday[22]
It is featured in season 1, episode 2, of the TV show Why Planes Crash, in an episode called "Breaking Point".
The incident is featured in the bestselling book The Checklist Manifesto by Atul Gawande.[23]
See also edit
- American Airlines Flight 96 – rapid decompression caused by a cargo door malfunction
- Turkish Airlines Flight 981 – explosive decompression caused by a cargo door malfunction
- Aloha Airlines Flight 243 – explosive decompression caused by metal fatigue in the fuselage
- British Airways Flight 5390 – explosive decompression caused by an improperly installed windscreen
- 1975 Tân Sơn Nhứt C-5 accident – loss of control caused by failure of locking mechanism for the aft pressure door
References edit
- ^ a b c d e f g h i j k l m n o p q r s t u v w x y z aa ab ac "Aircraft Accident Report, Explosive Decompression – Loss of Cargo Door in Flight, United Airlines Flight 811, Boeing 747-122, N4713U, Honolulu, Hawaii, February 24, 1989" (PDF). National Transportation Safety Board. March 18, 1992. Retrieved January 14, 2016.
- ^ a b c d Ranter, Harro (February 24, 1989). "ASN Aircraft accident Boeing 747-122 N4713U Hawaii". Aviation Safety Network. Retrieved August 16, 2017.
- ^ "Air Dabia C5-FBS (Boeing 747 – MSN 19875) (Ex N4713U N4724U ) | Airfleets aviation". www.airfleets.net. Retrieved January 14, 2019.
- ^ "02/24/89 United Airlines Official Accident Report" (PDF). Federal Aviation Administration. February 5, 2005. Retrieved January 14, 2019.
- ^ a b "Photo Air Dab".
- ^ "Boeing 747 – MSN 19875 – C5-FBS". airfleets.net. Retrieved July 22, 2018.
- ^ Kakesako, Gregg K. (October 6, 2010). "Hero pilot of United Flight 811 dies at age 81". Honolulu Star-Advertiser. Retrieved January 4, 2015.
- ^ "null". AP News. May 23, 2021. Retrieved January 16, 2023.
- ^ a b c d e f g h i j "Unlocking Disaster". Mayday. Season 1. Episode 1. 2003. Discovery Channel Canada / National Geographic Channel.
- ^ . The Washington Post. February 25, 1989. Archived from the original on March 3, 2018. Retrieved March 3, 2018.
- ^ a b c d e f g "Aircraft Accident Report, United Airlines Flight 811, Boeing 747-122, N4713U, Honolulu, Hawaii, February 24, 1989" (PDF). National Transportation Safety Board. April 16, 1990. Retrieved January 14, 2016.
- ^ . Federal Aviation Administration. U.S. Department of Transportation. Archived from the original on July 14, 2014. Retrieved July 2, 2014.
- ^ a b "Ripped Apart". Mayday. Season 6. Episode 1. 2007. Discovery Channel Canada / National Geographic Channel.
- ^ Valente, Judith (February 27, 1990). "Roots of Tragedy – Parents Seek Reasons For Death of Son". Wall Street Journal. Retrieved June 24, 2009.
- ^ Johnston, Moira. . pp. Page 29 Image. Archived from the original on February 19, 2012. Retrieved December 3, 2008.
- ^ Johnston, Moira (1976). The Last Nine Minutes: The Story of Flight 981. pp. Google Books Search on '747'. ISBN 9780688030841. Retrieved December 3, 2008.
- ^ (PDF). Archived from the original (PDF) on February 25, 2009. Retrieved December 3, 2008.
- ^ "Half of Door From Stricken Jetliner Recovered Off Hawaii". Los Angeles Times. October 3, 1990. Retrieved February 25, 2014.
- ^ Kolstad, James L (August 28, 1991). "Safety Recommendation Document A-91-83 and −84" (PDF). et al. Washington, DC, USA: National Transportation Safety Board. (PDF) from the original on October 8, 2012. Retrieved January 26, 2013.
- ^ . House of Representatives. May 10, 1989. p. H1798. Archived from the original on January 4, 2016 – via Library of Congress.
- ^ "Air Dabia C5-FBS (Boeing 747) (Ex N4713U N4724U )". Airfleets. Retrieved May 18, 2009.
- ^ "Audition for Captain Cronin". Vimeo. Rhys Trenhaile. Retrieved September 26, 2023.
- ^ Atul Gawande, The Checklist Manifesto, 2009, Metropolitan Books
External links edit
- First NTSB Aircraft Accident Report AAR-90/01 (superseded by Report AAR-92/02)
- Second NTSB Aircraft Accident Report AAR-92/02 - Copy at Embry-Riddle Aeronautical University
- Accident description at the Aviation Safety Network
- Transcript of cockpit voice recorder
- Pre-accident photos of N4713U
- The resting place of N4713U is 40°40′00.76″N 73°28′13.33″W / 40.6668778°N 73.4703694°W