Contributory Factors Maintenance
Maintenance/repair
Lessons
All
Asset integrity
Audits & Reviews
Commitment & Culture
Competency
Compliance with Standards
Contractor Management
Control of Work
Emergency Preparedness
Incident Investigation
LEADERSHIP
Management of Change
MONITORING & IMPROVEMENT
Operating Procedures
Operational Integrity
Operational Readiness
Performance Indicators
Process Knowledge
PROCESS SAFETY MANAGEMENT
RISK ANALYSIS
Risk Assessment
RISK MANAGEMENT
Stakeholder Engagement
UNCONFIRMED
Workforce Involvement
Industry
All
Aerospace
Agriculture
Chemicals
Explosives
FMCG
Food & Drink
Fossil Power
Gas Processing
Laboratory
Life Sciences
LNG
LPG
Manufacturing
Metal Processing
Mining
Miscellaneous
Nuclear Power
Offshore
Refining
Onshore Oil & Gas
Petrochemicals
Pipelines
Plastics & Polymers
Pulp & Paper
Rail
Renewable Power
Road
Shipping
Storage
Warehouse
Waste Treatment
Water Treatment
Country
All
AFRICA
Algeria
Angola
Argentina
ASIA
Australia
Bahrain
Belgium
Brazil
Cameroon
Canada
China
Czech Republic
Dutch Antilles
Ecuador
Egypt
EUROPE
Finland
France
Germany
Ghana
India
Indonesia
Ireland
Italy
Ivory Coast
Japan
Kuwait
Lebanon
Lithuania
Malaysia
Mexico
Morocco
Netherlands
New Zealand
Nigeria
NORTH AMERICA
Norway
AUSTRALIA
Oman
Papua New Guinea
Peru
Romania
Russia
Saudi Arabia
Singapore
South Africa
SOUTH AMERICA
South Korea
South Sudan
Spain
Sweden
Switzerland
Taiwan
Thailand
Turkey
Ukraine
Abu Dhabi
United Kingdom
United States
Venezuela
Virgin Islands
Language
All
AR
CS
DE
EN
ES
FR
IT
JA
KO
NL
PL
PT
RO
RU
SV
TR
VI
ZH
LoC
All
Adjacent explosion
Component malfunction
Confined explosion
DAMAGE
Deficiency
DEGRADATION
Deterioration
DEVIATION
DISCHARGE
Fire exposure
Genuine release
Impact
Maintenance error
Material incompatibility
Natural event
Operator error
Overpressure
Overtemperature
Structural settlement
Transport
Underpressure
Undertemperature
UNKNOWN
Incident
All
Asphyxiation
BLEVE
Blowout
Capsize
COLLAPSE
COLLISION
Conflagration
Dust explosion
EXPLOSION
Explosive decomposition
FIRE
Fireball
Flash fire
Fluid release to ground
Fluid release to water
Gas/vapour/mist/etc release to air
IMPACT
Implosion
Jet flame
Pool fire
Pressure burst
Rapid phase-transition explosion
RELEASE
Runaway reaction explosion
Solid release to air
Solid release to ground
Solid release to water
UNKNOWN
VCE
Hazards
All
Asphyxiant
Biological
Corrosive
Electrical
Environmental
Explosive
Flammable
Harmful/Irritant
Mechanical/Kinetic/Potential
Oxidising
Radiological
Reactive
Toxic
Contributory Factors
All
Blockage
Component Malfunction
Containment Failure
Corrosion/Erosion/Fatigue
Cyber Attack
Design of Plant
Domino Effect
Electrostatic Accumulation
Equipment Isolation
Error
EXTERNAL
Fatigue
Health
Housekeeping
HUMAN
Installation
Instrument Failure
Loss of Process Control
Maintenance
Management Attitude
Manufacture/Construction
Natural Event
Object impact
Organization Inadequate
ORGANIZATIONAL
Organized Procedures
Physical Security Breach
PLANT/EQUIPMENT
Process Analysis
Runaway Reaction
Staffing
Supervision
Testing
Training/Instruction
Transport Accident
UNKNOWN
User Unfriendliness
Utilities Failure
Violation
Impact
All
COST (Offsite)
COST (On Site)
ENVIRONMENTAL (Offsite)
ENVIRONMENTAL (On Site)
HUMAN (Offsite At Risk)
HUMAN (Offsite Fatalities)
HUMAN (Offsite Injuries)
HUMAN (On Site At Risk)
HUMAN (On Site Fatalities)
HUMAN (On Site Injuries)
Effects
All
> 100 Fatalities
< 100 Injuries
1-10 Fatalities
11 - 100 Fatalities
11 – 100 Fatalities
≥ 100 Injuries
Environmental
Financial
Equipment
All
Baghouse
Bearing
Blinds
Casing Seal
Conveyer Belt
Dryer
Dust Collector
Expansion Joint
Fittings (Elbow)
Gas-lift Riser
Grain Dryer
Heat Exchanger
Hoses
Instruments
Level
Mechanical
Mill
Pipe
Piping
PSV – Pilot Operated
Reactor
Rotating
Safety & Control
Shell & Tube
Silo
Tanks
Valves - Safety
Vessels
Operation
All
Air Transport
Batch Reaction
Continuous Reaction
Disposal
Electrochemical Operation
Export/Loading
Heat Exchanger
Import/Unloading
Mechanical Transfer
Movement
OTHER
Packaging
Physical Operation
Pipeline Transfer
Power Generation
PROCESS
Processing
propylene
Rail Transport
Road Transport
Ship Transport
Stockholding
STORAGE
TRANSFER
UNKNOWN
Material
All
4-hydroxybenzohydrazide
Acetal
Acetone
Acetylene
Acrylic monomers
Acrylonitrile
Adiponitrile
Alkylate
Allyl alcohol
Allyl chloride
Aluminium
Aluminium Sulphate
Ammonia
Ammonium Nitrate
Ammonium Perchlorate
Antimony Pentachloride
Azodiisobutyronitrile
Barium nitrate
Benzoyl Peroxide
Black Ink
BS&W
Butadiene
Butane
Butylene
Calcium Carbide
Carbon disulfide
Chlorine
Chlorofluoroaniline
Coal
Coke
Coke gas
Colored powder
Compressed Air
Corn
Crude Oil
Cyanide
Cyclohexane
Cyclohexanol
Cyclohexanone
Diesel fuel
Dioxin
Drilling chemicals
Ethane
Ethanol
Ethyl Acetate
Ethyl chloride
Ethylene
Ethylene Oxide
Explosives
Ferric chloride
Fertilizer
Firecrackers/Fireworks
Fish Meal
Fuel Oil
Glycol
Grain Dust
Heptane
Hexane
Hydrocarbons
Hydrochloric acid
Hydrogen
Hydrogen Chloride
Hydrogen Fluoride
Hydrogen Peroxide
Hydrogen Sulfide
Hydroxylamine
Iron
Isobutane
Isobutylene
Limestone
Liquid hydrogen
LNG
LPG
Lubricant additives
MCHM
MCMT
Mercury
Metal Dust
Methane
Methanol
Methomyl
Methyl Chloride
Methyl Ethyl Ketone
Methyl Isocyanate
Methyl Mercaptan
Methylcellulose
Mononitrotoluene
Naptha
NGL
NHP
Nitric acid
Nitric Oxide
Nitro-based fertilizer
Nitrogen
Nitromethane
Nitrous Oxide
Nylon
Octyl Phenol
Oil based solvent
Oil derivatives
Olefins
Oleum
Organic Peroxides
Ortho-Nitrochlorobenzene
Oyxgen
Paraxylene
PCB
Peroxides
Petroleum products
Petroleum/Gasoline
Phenolic resin
Phosgene
Phthalates
Pipeline additives
Plastics
Polybrominated Biphenyl
Polybutadiene
Polyethylene
Polymers
Propane
Propylene
Pyrolysis gasoline
Quartz
Radioisotopes
Resins
Sawdust
Silicon Hydride
Sodium
Sodium Chlorate
Sodium Chlorite
Sodium hydrosulfide
Sodium Hypochlorite
Steam
Steam condensate
Steel
Styrene
Sugar
Sulfuric Acid
Sunflower oil
Terpene
Titanium
Titanium Dioxide
Toluene
Unknown
Urea Ammonium Nitrate
Urea-based fertilizer
Various
Vinyl Chloride Monomer
Vinyl Fluoride
Xylene
Zinc
Zoalene
Live Event Type
All
Training
Conference
Webinar
Online Training
Workshop
Document Type
All
Alert
Article
Blog
Book
Bulletin
Case Study
Guidance
Paper
Podcast
Post
Safety Newsletter
Summary
Video
Webinar
Topics
All
Ageing
Alarm Management
Bowties
Chemical Reaction
Combustible Dust
COVID19
Cyber Security
Design
Flammable Atmospheres
Functional Safety
HAZOP
Human Factors
LOPA
Mitigation Measures
Natural Hazards
Pressure Systems
Quantitative Risk Assessment
Occupied Buildings
Work Management
Origin
All
AIChE
AIDIC
ARIA
BBC News
César Puma
CCPS
CGE Risk
Chemical Processing
CSB
Dekra
Dust Safety Science
Dutch Safety Board
EI
eMARS
EPA
EPSC
HSE
HSL
IAEA
IChemE
IChemE SLP
ioMosaic
ISC
Louise Whiting
MAIB
Marsh
Martin Carter
MKOPSC
NASA
New Zealand Government
NFPA
NRC
NTSB
OECD
Process Safety Integrity
PSA Norway
PSF
Rachael Cowin
Ramin Abhari
Red Risks
Reuters
Smithsonian Channel
Step Change in Safety
Sudaksha
TCE
TSB
TSBC
Wikipedia
WorkSafeBC
Yasmin Ali
Tag
All
Blind
Communication
Condensate
Evacuation
LOPC
LOTO
MoC
Permit
Piper
PtW
TSR
Explosion
Blowout
BOP
Cement
Contractor
Design
Drill
Fire
Macondo
Pollution
Regulatory
Rig
Training
Amusement Park
Autoignition
Banking
BLEVE
Cave Diving
Corrosion Under Insulation
Collision
High North
MHN
MSV
Protection
Riser
Rupture
Procedure
FPSO
Pump
Alarm
Quarters
Camarupim
PSSR
Risk
Deethaniser
Injection
USGP
Erosion
Corrosion
Humber
Geometry
Washwater
Fatality
Texas
Blowdown
NSU
PSV
Trailer
Overfill
ISOM
Splitter
Vent
Richmond
CDU
Silicon
HTSC
Pipe
Fittings
Smoke
Radar
Grounding
Boom
Reef
Ice
Fatigue
OPA
Alcohol
Valdez
VLCC
ATG
Buncefield
Bund
Drain
Gasoline
Human
IHLS
Level
Tank
Flixborough
Competence
Layout
Caprolactam
Bellows
QA
Planning
Temporary
UVCE
Building
Castleford
Jet
MNT
Runaway
CoW
Muster
Nitration
Hickson
PHA
Olefin
Geismar
Exchanger
Hierarchy
Valve
Accountability
MIC
Toxic
Scrubber
Control
Bhopal
Isolation
Sabotage
CMP
Cork
Exotherm
HAZOP
BD
Decomposition
Overpressure
Pharmachem
Reactor
Mile
Melt
Core
Instrumentation
PRV
PWR
Containment
RBMK
Chernobyl
Graphite
Criticality
Radiation
Void
BWR
Fukushima
Regulator
Power
Earthquake
Hydrogen
LOCA
Tsunami
Abbeystead
Methane
Tunnel
Aluminium
Camelford
Flocculant
Monitoring
Emergency
Dust
Preparedness
Leadership
Housekeeping
Sugar
Wentworth
Blockage
Combustion Control
Boil Over
Compressed Gas
Confirmation Bias
Contamination
Creeping Change
Draining
Equipment Identification
Expired Chemicals
Firefighting
Fireproofing
Hot Spots
Winterization
Flanges
High Pressure Water
Laboratory Safety
Hydrogen Attack
Lifting Operations
Loss of Utilities
Low Temperature Embrittlement
Mechanical Seals
Metal Fatigue
Flare Systems
Modern Technology
Nuclear Safety
Normalization of Deviance
Positive Isolation
Release Containment
Safe Operating Limits
Thermal Expansion
Threaded Equipment
Well Control
Water Hammer
Testing
Stress Corrosion Cracking
Security
Permit To Work
Furnaces
Implosion
Inert Atmospheres
Learning from Incidents
Static discharge
Startup Operations
Shift Handover
Relief Systems
Project Management
Process Interruptions
EBV
Embrittlement
Longford
McKee
Chlorine
Dead-leg
Freeze
FCC
DCS
Milford
Maintenance
Troubleshooting
Alarms
Catalyst
Moerdijk
Startup
Floating Roof Tanks
Remote
Virtual
H2S
Hydrogen Sulphide
Minute To Learn
Occupational Safety
Deepwater Horizon
LFL
Worksite Checks
Coastal Flooding
HDPE
Career Path
Grenfell Tower
Configuration Control
Safety Critical Decisions
Time Pressures
Small Businesses
eMARS
Leak Detection
Railways
OECD
Framework
Hand Sanitizer
COMAH
Safety Literacy
Vibration
Electrostatic
February
Summary
On February 2, 2001, a fire occurred at Bethlehem Steel Corporation’s Burns Harbor mill in Chesterton, Indiana. One Bethlehem Steel millwright and one contractor supervisor died. Four Bethlehem Steel millwrights
Summary
On February 2, 2001, a fire occurred at Bethlehem Steel Corporation’s Burns Harbor mill in Chesterton, Indiana. One Bethlehem Steel millwright and one contractor supervisor died. Four Bethlehem Steel millwrights were injured, one seriously. Workers were attempting to remove a slip blind and a cracked valve from a coke oven gas line leading to a decommissioned furnace. During removal of the valve, flammable liquid was released and ignited.
KEY ISSUES:
• MAINTENANCE JOB PLANNING
• FACILITY WINTERIZATION & DEADLEGS
• LINE & EQUIPMENT OPENING
• DECOMMISSIONING & DEMOLITION
ROOT CAUSES:
1. Management systems for the supervision, planning, and execution of maintenance work were inadequate.
2. The Burns Harbor facility did not have a system for monitoring and controlling hazards that could be caused by changes in COG condensate flammability or accumulation rates.
Image Credit: CSB

Summary
Six workers were fatally injured during a planned work activity to clean debris from natural gas pipes at Kleen Energy in Middletown, CT. To remove the debris, workers used natural
Summary
Six workers were fatally injured during a planned work activity to clean debris from natural gas pipes at Kleen Energy in Middletown, CT. To remove the debris, workers used natural gas at a high pressure of approximately 650 pounds per square inch. The high velocity of the natural gas flow was intended to remove any debris in the new piping. During this process, the natural gas found an ignition source and exploded.
KEY ISSUES:
• SIMILAR NATURAL GAS BLOW INCIDENTS
• INDUSTRY PRACTICES AND SAFER ALTERNATIVE METHODOLOGIES
• HAZARDS OF RELEASING NATURAL GAS NEAR WORK AREAS
• CODES AND STANDARDS
ROOT CAUSES:
1. Natural gas blows are common
2. Workers remained in building during gas blow
Image credit: CSB

Related Events
Summary
On Wednesday, February 8, 2017, at approximately 11:05 am, a foul condensate tank, part of a non-condensable gas system, exploded at the Packaging Corporation of America (PCA) containerboard mill in
Summary
On Wednesday, February 8, 2017, at approximately 11:05 am, a foul condensate tank, part of a non-condensable gas system, exploded at the Packaging Corporation of America (PCA) containerboard mill in DeRidder, Louisiana. The explosion killed three people and injured seven others. All 10 people were working at the mill as contractors. The explosion also heavily damaged the surrounding process. The foul condensate tank travelled approximately 375 feet and over a six-story building before landing on process equipment.
At the time of the incident, the mill was undergoing its annual planned maintenance outage, also referred to as a shutdown. The foul condensate tank likely contained water, a layer of flammable liquid turpentine on top of the water, and an explosive vapor space containing air and flammable turpentine vapor.
KEY ISSUES:
• PROCESS SAFETY MANAGEMENT SYSTEM
• INHERENTLY SAFER DESIGN
• PROCESS HAZARD ANALYSIS
• INEFFECTIVE SAFEGUARDS
• HOT WORK SAFETY MANAGEMENT
ROOT CAUSES:
1. PCA did not evaluate the majority of the non-condensable gas system, including the foul condensate tank, for certain hazards. The DeRidder mill never conducted a process hazard analysis to identify, evaluate, and control process hazards for the non-condensable gas system.
2. PCA did not expand the boundaries of its process safety management program beyond the units covered by safety regulations.
3. PCA did not effectively apply the hierarchy of controls to the selection and implementation of safeguards that the company used to prevent a potential non-condensable gas explosion.
4. PCA did not evaluate inherently safer design options that could have eliminated the possibility of air entering the non-condensable gas system, including the foul condensate tank.
5. PCA did not establish which mill operations group held ownership of, and responsibility for, the foul condensate tank.
6. PCA did not apply important aspects of industry safety guidance and standards.
Image credit: CSB

Summary
On February 12, 2014, a mechanical integrity failure released sulfuric acid in the alkylation unit, which burned two Tesoro Martinez refinery employees. Approximately 84,000 pounds of sulfuric acid were released
Summary
On February 12, 2014, a mechanical integrity failure released sulfuric acid in the alkylation unit, which burned two Tesoro Martinez refinery employees. Approximately 84,000 pounds of sulfuric acid were released during the incident.
On March 10, 2014, sulfuric acid sprayed and burned two contract workers while they removed piping in the same alkylation unit. The CSB found that this second incident shared similar causation with a 1999 incident at the same refinery, then called the Avon refinery, owned by the Tosco Corporation, that resulted in four fatalities. Similarities between the two incidents suggest that the Tesoro Martinez refinery did not effectively continue to implement or communicate important safety lessons from the 1999 Tosco incident.
KEY ISSUES:
• PROCESS SAFETY CULTURE
• PROCESS SAFETY INDICATORS
ROOT CAUSES:
1. The safety culture at the Tesoro Martinez refinery created conditions conducive to the occurrence and recurrence of process safety incidents that caused worker injuries at the refinery over several years.
2. Prior sulfuric acid exposure incidents at the Tesoro Martinez refinery could have properly been considered leading indicators of an impending serious chemical accident and then triggered preventive inspections and review of the refinery’s safety systems and equipment.
Image & AcciMap Credit: CSB
Image credit: CSB

Summary
On Wednesday, February 18, 2015, an explosion occurred in the ExxonMobil Torrance, California refinery’s Electrostatic Precipitator (ESP), a pollution control device in the fluid catalytic cracking (FCC) unit that removes
Summary
On Wednesday, February 18, 2015, an explosion occurred in the ExxonMobil Torrance, California refinery’s Electrostatic Precipitator (ESP), a pollution control device in the fluid catalytic cracking (FCC) unit that removes catalyst particles using charged plates that produce sparks (potential ignition sources) during normal operation. The incident occurred when ExxonMobil was attempting to isolate equipment for maintenance while the unit was in an idled mode of operation; preparations for the maintenance activity caused a pressure deviation that allowed hydrocarbons to backflow through the process and ignite in the ESP.
The CSB found that this incident occurred due to weaknesses in the ExxonMobil Torrance refinery’s process safety management system. These weaknesses led to operation of the FCC unit without pre-established safe operating limits and criteria for unit shutdown, reliance on safeguards that could not be verified, the degradation of a safety-critical safeguard, and the re-use of a previous procedure deviation without a sufficient hazard analysis that confirmed that the assumed process conditions were still valid. .
KEY ISSUES:
• LACK OF SAFE OPERATING LIMITS & OPERATING PROCEDURE
• SAFEGUARD EFFECTIVENESS
• OPERATING EQUIPMENT BEYOND SAFE OPERATING LIFE
• RE-USE OF PREVIOUS PROCEDURE VARIANCE WITHOUT SUFFICIENT HAZARD ANALYSIS
ROOT CAUSES:
1. ExxonMobil did not establish the safe operating limits for operating the FCC unit in Safe Park (a standby mode of operation) or determine process conditions that required unit shutdown.
2. ExxonMobil did not perform a sufficient hazard analysis to determine if the unit conditions specified in the 2012 procedure were valid for the 2015 operation.
3. ExxonMobil operated FCC unit equipment beyond its predicted safe operating life.
4. ExxonMobil lacked safety instrumentation to detect flammable hydrocarbons flowing through the equipment and into the ESP.
5. ExxonMobil refinery management permitted opening process equipment without conforming to refinery standards.
Image credit: CSB

Summary
On February 23, 1999, a fire occurred in the crude unit at Tosco Corporation. Avon oil refinery in Martinez, California. Workers were attempting to replace piping attached to a 150-foot-tall
Summary
On February 23, 1999, a fire occurred in the crude unit at Tosco Corporation. Avon oil refinery in Martinez, California. Workers were attempting to replace piping attached to a 150-foot-tall fractionator tower while the process unit was in operation. During removal of the piping, naphtha was released onto the hot fractionator and ignited. The flames engulfed five workers located at different heights on the tower. Four men were killed, and one sustained serious injuries.
KEY ISSUES:
• CONTROL OF HAZARDOUS NONROUTINE MAINTENANCE
• MANAGEMENT OVERSIGHT & ACCOUNTABILITY
• MANAGEMENT OF CHANGE
• CORROSION CONTROL
ROOT CAUSES:
1. Tosco Avon refinery’s maintenance management system did not recognize or control serious hazards posed by performing nonroutine repair work while the crude processing unit remained in operation.
2. Tosco’s safety management oversight system did not detect or correct serious deficiencies in the execution of maintenance and review of process changes at its Avon refinery.
Image Credit: CSB

March
Summary
On March 13, 2001, three people were killed as they opened a process vessel containing hot plastic at the BP Amoco Polymers plant in Augusta, Georgia. They were unaware that
Summary
On March 13, 2001, three people were killed as they opened a process vessel containing hot plastic at the BP Amoco Polymers plant in Augusta, Georgia. They were unaware that the vessel was pressurized. The workers were killed when the partially unbolted cover blew off the vessel, expelling hot plastic. The force of the release caused some nearby tubing to break. Hot fluid from the tubing ignited, resulting in a fire.
KEY ISSUES:
• RECOGNITION OF REACTIVE HAZARDS
• LEARNING FROM NEAR-MISS INCIDENTS
• OPENING OF PROCESS EQUIPMENT
ROOT CAUSES:
1. Amoco, the developer of the Amodel process, did not adequately review the conceptual process design to identify chemical reaction hazards.
2. The Augusta facility did not have an adequate review process for correcting design deficiencies.
3. The Augusta site system for investigating incidents and nearmiss incidents did not adequately identify causes or related hazards. This information was needed to correct the design and operating deficiencies that led to the recurrence of incidents.
Image Credit: CSB

Related Events
April
Summary
A fire started inside a depot with 3 million liters of diesel and the flames spread to four neighboring storage tanks. The fire lasted for 9 days. Fine of around USD
Summary
A fire started inside a depot with 3 million liters of diesel and the flames spread to four neighboring storage tanks. The fire lasted for 9 days.
Fine of around USD $6.4 million (R$ 22.5 million). Environmental impact causing death of thousands of fish
Proximate causes:
• Inadequate management/ supervision
• Inadequate work planning
Source: A web-based collection and analysis of process safety incidents (https://www.sciencedirect.com/science/article/abs/pii/S0950423016302285)
Image Credit: Paulo Whitaker / Reuters
Summary
On April 8, 2004, four workers were seriously injured when highly flammable gasoline components were released and ignited at the Giant Industries Ciniza refinery, east of Gallup, New Mexico. The
Summary
On April 8, 2004, four workers were seriously injured when highly flammable gasoline components were released and ignited at the Giant Industries Ciniza refinery, east of Gallup, New Mexico. The release occurred as maintenance workers were removing a malfunctioning pump from the refinery’s hydrofluoric acid (HF) alkylation unit. Unknown to personnel, a shut-off valve connecting the pump to a distillation column was apparently in the open position, leading to the release and subsequent explosions.
KEY ISSUES:
• MECHANICAL INTEGRITY
• CORROSION & SCALE FORMATION
• VALVE DESIGN
• HUMAN FACTORS CONSIDERATION
• MANAGEMENT OF CHANGE
• LOCKOUT/TAGOUT & ISOLATION
ROOT CAUSES:
1. An MOC hazard analysis was not conducted.
2. the facility lacked procedures to verify that the pump had been isolated, depressurized and drained.
3. Instead of determining the cause of frequent pump malfunctions and then implementing a program that would prevent problems before they occurred, Giant used breakdown maintenance by making repeated repairs to the pump seals after failure.
Image Credit: CSB

Summary
On April 26, 2018, an explosion and subsequent fire occurred at the Superior Refinery Company LLC refinery in Superior, Wisconsin (‘Husky Superior Refinery’). The incident occurred in the refinery’s Fluid
Summary
On April 26, 2018, an explosion and subsequent fire occurred at the Superior Refinery Company LLC refinery in Superior, Wisconsin (‘Husky Superior Refinery’). The incident occurred in the refinery’s Fluid Catalytic Cracking Unit (FCCU). In preparation for the shutdown, the refinery brought in hundreds of contractors and increased operations staffing. The contractors were performing many tasks such as electrical work, preparing for chemical cleaning, building scaffolding, and welding. As a result of the explosion, thirty-six people sought medical attention, including eleven refinery and contract workers who suffered OSHA recordable injuries. In addition, a large portion of Superior, Wisconsin was evacuated. The refinery was shutting down in preparation for a five-week turnaround when an explosion occurred, sending several people to area hospitals with injuries.
KEY ISSUES:
• PYROPHORIC IRON SULFIDE
Image credit: CSB

June
Summary
An explosion at the Partridge-Raleigh oilfield in Raleigh, Mississippi. The incident occurred at about 8:30 a.m. on June 5, 2006, when Stringer’s Oilfield Services contract workers were installing pipe from
Summary
An explosion at the Partridge-Raleigh oilfield in Raleigh, Mississippi. The incident occurred at about 8:30 a.m. on June 5, 2006, when Stringer’s Oilfield Services contract workers were installing pipe from two production tanks to a third. Welding sparks ignited flammable vapor escaping from an open-ended pipe about four feet from the contractors’ welding activity on tank 4. The explosion killed three workers who were standing on top of tanks 3 and 4. A fourth worker was seriously injured.
KEY ISSUES:
• HOT WORK CONTROL
• SAFE WORK PRACTICES AT OIL & GAS PRODUCTION WELLS
ROOT CAUSES:
1. A gas detector was not used to test for flammable vapor.
2. ‘Flashing’ tanks containing hydrocarbons with a lit oxy-acetylene torch to determine the presence of flammable vapor is unsafe and extremely dangerous.
3. The open pipe on the adjacent tank was not capped or otherwise isolated.
4. A makeshift work platform – a ladder placed between the tanks – was used.
5. All tanks were interconnected and some of the tanks contained flammable residue and crude oil.
Image credit: CSB

Summary
On June 9, 2009, a major natural gas explosion heavily damaged the ConAgra Slim Jim meat processing factory in Garner, North Carolina, just south of Raleigh. Three workers were crushed
Summary
On June 9, 2009, a major natural gas explosion heavily damaged the ConAgra Slim Jim meat processing factory in Garner, North Carolina, just south of Raleigh. Three workers were crushed to death when a large section of the building collapsed. The explosion critically burned four others and sent a total of 71 people to the hospital including three firefighters who were exposed to toxic anhydrous ammonia from the plant’s refrigeration system. Approximately 18,000 pounds of ammonia were released to the environment and 100,000 square feet of the plant were damaged. Due to the severity of the structural collapse, there was the potential for numerous additional deaths or serious injuries.
KEY ISSUES:
• DIRECTLY VENT PURGED GASES TO A SAFE LOCATION OUTDOORS, AWAY FROM PEOPLE AND IGNITION SOURCES.
• USE COMBUSTIBLE GAS DETECTORS TO MONITOR THE GAS CONCENTRATION DURING PURGING OPERATIONS.
• ENSURE PERSONNEL INVOLVED IN GAS PURGING OPERATIONS ARE FULLY TRAINED.
ROOT CAUSES:
1. Purging into equipment vicinity is common practice
Image credit: CSB

Related Events
Summary
On June 10, 2008, Goodyear operators closed an isolation valve between the heat exchanger shell (ammonia cooling side) and a relief valve to replace a burst rupture disk under the
Summary
On June 10, 2008, Goodyear operators closed an isolation valve between the heat exchanger shell (ammonia cooling side) and a relief valve to replace a burst rupture disk under the relief valve that provided over-pressure protection. Maintenance workers replaced the rupture disk on that day; however, the closed isolation valve was not reopened.
On the morning of June 11, an operator closed a block valve isolating the ammonia pressure control valve from the heat exchanger. The operator then connected a steam line to the process line to clean the piping. The steam flowed through the heat exchanger tubes, heated the liquid ammonia in the exchanger shell, and increased the pressure in the shell. The closed isolation and block valves prevented the increasing ammonia pressure from safely venting through either the ammonia pressure control valve or the rupture disk and relief valve. The pressure in the heat exchanger shell continued climbing until it violently ruptured at about 7:30 a.m.
The catastrophic rupture threw debris that struck and killed a Goodyear employee walking through the area. The rupture also released ammonia, exposing five nearby workers to the chemical. One additional worker was injured while exiting the area.
KEY ISSUES:
• EMERGENCY RESPONSE & ACCOUNTABILITY
• MAINTENANCE COMPLETION
• PRESSURE VESSEL OVER-PRESSURE PROTECTION
ROOT CAUSES:
1. Although maintenance workers had replaced the rupture disk by about 4:30 p.m. on June 10, the primary over-pressure protection for the heat exchanger remained isolated until the heat exchanger ruptured at about 7:30 a.m. on June 11.
Image credit: CSB

Summary
The June 13, 2013 catastrophic equipment rupture, explosion, and fire at the Williams Olefins Plant in Geismar, Louisiana, which killed two Williams employees. The incident occurred during nonroutine operational activities
Summary
The June 13, 2013 catastrophic equipment rupture, explosion, and fire at the Williams Olefins Plant in Geismar, Louisiana, which killed two Williams employees. The incident occurred during nonroutine operational activities that introduced heat to a type of heat exchanger called a ‘reboiler’ which was offline, creating an overpressure event while the vessel was isolated from its pressure relief device. The introduced heat increased the temperature of the liquid propane mixture confined within the reboiler shell, resulting in a dramatic pressure rise within the vessel due to liquid thermal expansion. The reboiler shell catastrophically ruptured, causing a boiling liquid expanding vapor explosion (BLEVE) and fire.
Process safety management program weaknesses at the Williams Geismar facility during the 12 years leading to the incident caused the reboiler to be unprotected from overpressure.
KEY ISSUES:
• OVERPRESSURE PROTECTION
• PROCESS HAZARD ANALYSIS
• MANAGEMENT OF CHANGE
• PRE-STARTUP SAFETY REVIEW
• OPERATING PROCEDURES
• HIERARCHY OF CONTROLS
• PROCESS SAFETY CULTURE
ROOT CAUSES:
1. Williams did not perform the 2001 MOC until after the plant was operating with the valves installed, and the associated PSSR was incomplete. These actions did not comply with facility (and regulatory) safety management system requirements; however, Williams management accepted both of these practices;
2. Car seals are low-level, administrative controls, but they were the favored safeguard in the 2006 PHA recommendation to prevent overpressure events. Williams Geismar did not have a policy requiring the effectiveness of safeguards to be analyzed;
3. Williams Geismar did not follow OSHA PSM regulatory requirements that operations activities have an associated procedure to safely conduct the work. For example, Williams did not create a procedure specifically for switching the propylene fractionator reboilers Such a procedure should have alerted the operations personnel of the overpressure hazard;
4. The Williams PHA policy did not require effective action item resolution and verification, resulting in incorrect action item implementation in the field;
5. The Williams PHA policy did not require PHA teams to effectively evaluate and control risk; and
6. Operations personnel had informal authorization to manipulate field equipment as part of assessing process deviations without first conducting a hazard evaluation and developing a procedure.
Image & AcciMap Credit: CSB
