Accident | |
---|---|
Date | 7 October 2008 |
Summary | In-flight upset due to software error resulting in two pitch-downs |
Site | Indian Ocean; 80NM from Learmonth 22°14′06″S114°05′18″E / 22.23500°S 114.08833°E |
Aircraft | |
Aircraft type | Airbus A330-303 |
Aircraft name | Kununurra |
Operator | Qantas |
IATA flight No. | QF72 |
ICAO flight No. | QFA72 |
Call sign | QANTAS 72 |
Registration | VH-QPA |
Flight origin | Singapore Changi Airport, Singapore |
Destination | Perth Airport, Australia |
Occupants | 315 |
Passengers | 303 |
Crew | 12 |
Fatalities | 0 |
Injuries | 119 |
Survivors | 315 |
Qantas Flight 72 (QF72) was a scheduled flight from Singapore Changi Airport to Perth Airport by an Airbus A330. On 7 October 2008, the flight made an emergency landing at Learmonth Airport near the town of Exmouth, Western Australia, following an inflight accident that included a pair of sudden, uncommanded pitch-down manoeuvres that caused severe injuries—including fractures, lacerations and spinal injuries—to several of the passengers and crew. [1] [2] [3] [4] [5] At Learmonth, the plane was met by the Royal Flying Doctor Service of Australia and CareFlight. [6] [7] Fourteen people were airlifted to Perth for hospitalisation, with thirty-nine others also attending hospital. [8] [9] [10] [11] In all, one crew member and eleven passengers suffered serious injuries, while eight crew and ninety-nine passengers suffered minor injuries. [12] The Australian Transport Safety Bureau (ATSB) investigation found a fault with one of the aircraft's three air data inertial reference units (ADIRUs) and a previously unknown software design limitation of the Airbus A330's fly-by-wire flight control primary computer (FCPC).
The aircraft involved was an Airbus A330-303 registered as VH-QPA. [13]
The crew was led by Captain Kevin Sullivan (53), a former US Navy (1977–1986) pilot who had moved to Australia. The first officer was Peter Lipsett, and the second officer was Ross Hales. Captain Sullivan had 13,592 flight hours, including 2,453 hours on the Airbus A330. First Officer Lipsett had 11,650 flight hours, with 1,870 of them on the Airbus A330. Second Officer Hales had 2,070 flight hours, with 480 of them on the Airbus A330. [14]
In addition to the three flight-deck crew members, there were nine cabin crew members and 303 passengers, for a total of 315 people on board. [15]
On 7 October 2008 at 09:32 SST, Qantas Flight 72, with 315 people on board, departed Singapore on a scheduled flight to Perth, Western Australia. By 10:01, the aircraft had reached its cruising altitude of around 37,000 feet (11,000 m) and was maintaining a cruising speed of Mach 0.82.
The incident started at 12:40:26 WST, when one of the aircraft's three air data inertial reference units (ADIRUs) started providing incorrect data to the flight computer. In response to the anomalous data, the autopilot disengaged automatically. A few seconds later, the pilots received electronic messages on the aircraft's electronic centralised aircraft monitor, warning them of an irregularity with the autopilot and inertial reference systems, and contradictory audible stall and overspeed warnings. During this time, the captain began to control the aircraft manually. The autopilot was then re-engaged and the aircraft started to return to the prior selected flight level. The autopilot was disengaged by the crew after about 15 seconds and remained disengaged for the remainder of the flight.
At 12:42:27, the aircraft made a sudden, uncommanded pitch-down manoeuvre, experiencing −0.8 g, [note 1] reaching 8.4 degrees pitch down and rapidly descending 650 feet (200 m). Twenty seconds later, the pilots were able to return the aircraft to the assigned cruise flight level, FL370. At 12:45:08, the aircraft made a second uncommanded manoeuvre of a similar nature, this time causing an acceleration of +0.2 g, [note 2] a 3.5 degree down angle, and a loss of altitude of 400 feet (120 m); the flight crew was able to re-establish the aircraft's assigned level flight 16 seconds later. [16] [17] Unrestrained (and even some restrained) passengers and crew were flung around the cabin or crushed by overhead luggage, as well as crashing with and through overhead-compartment doors. The pilots stabilised the plane and declared a state of alert, which was later updated to mayday when the extent of injuries was relayed to the flight crew. [8] [18]
The Australian Transport Safety Bureau (ATSB) investigation was supported by the Australian Civil Aviation Safety Authority, Qantas, the French Bureau of Enquiry and Analysis for Civil Aviation Safety (BEA) and Airbus. [3] Copies of data from the aircraft's flight data recorder and cockpit voice recorder were sent to the BEA and Airbus. [17]
The aircraft was equipped with an air data inertial reference unit (ADIRU) manufactured by Northrop Grumman; investigators sent the unit to Northrop Grumman in the United States for further testing. [19] [20] On 15 January 2009, the European Aviation Safety Agency (EASA) issued an emergency airworthiness directive [21] to address the problem of A330 and A340 aircraft, equipped with the Northrop-Grumman ADIRUs, incorrectly responding to a defective inertial reference.
In a preliminary report, the ATSB identified a fault occurring within the number-one ADIRU as the "likely origin of the event"; the ADIRU, one of three such devices on the aircraft, began to supply incorrect data to the other aircraft systems. [22] [23]
The initial effects of the fault were: [4]
About two minutes later, ADIRU no. 1, which was providing data to the captain's primary flight display, provided very high (and false) indications for the aircraft's angle of attack (AOA), leading to: [4]
AOA is a critically important flight parameter, and full-authority flight control systems, such as those equipping A330/A340 aircraft, require accurate AOA data to function properly. The aircraft was fitted with three ADIRUs to provide redundancy for fault tolerance, and the FCPCs used the three independent AOA values to check their consistency. In the usual case, when all three AOA values were valid and consistent, the average value of AOA 1 and AOA 2 was used by the FCPCs for their computations. If either AOA 1 or AOA 2 significantly deviated from the other two values, the FCPCs used a memorised value for 1.2 seconds. The FCPC algorithm was very effective, but it could not correctly manage a scenario where multiple spikes occurred in either AOA 1 or AOA 2 that were 1.2 seconds apart—that is, if the 1.2-second period of use of the memorised value happened to end while another spike was happening.
As with other safety-critical systems, the development of the A330/A340 flight-control system during 1991 and 1992 had many elements to minimise the risk of a design error, including peer reviews, a system safety assessment (SSA), and testing and simulations to verify and validate the system requirements. None of these activities identified the design limitation in the FCPC's AOA algorithm.
The ADIRU failure mode had not been previously encountered, or identified by the ADIRU manufacturer in its SSA activities. Overall, the design, verification and validation processes used by the aircraft manufacturer did not fully consider the potential effects of frequent spikes in data from an ADIRU.
Airbus stated that it was not aware of a similar incident occurring previously on an Airbus aircraft. It released an operators' information Telex to operators of A330 and A340 aircraft with procedural recommendations and checklists to minimise risk in the event of a similar incident. [4]
After detailed forensic analysis of the FDR, the FCPC software, and the ADIRU, the CPU of the ADIRU was found to have corrupted the AOA data. The exact nature of the corruption was that the ADIRU CPU erroneously relabelled the altitude data word so that the binary data that represented 37,012 (the altitude at the time of the incident) would represent an angle of attack of 50.625°. The FCPC then processed the erroneously high AOA data, triggering the high-AOA protection mode, which sent a command to the electrical flight control system to pitch the nose down. [14]
A number of potential trigger types were investigated, including software bugs, software corruption, hardware faults, electromagnetic interference, and the secondary high-energy particles generated by cosmic rays that can cause a bit flip. Although a definitive conclusion could not be reached, sufficient information from multiple sources enabled the conclusion that most of the potential triggers were very unlikely to have been involved. A much more likely scenario was that a marginal hardware weakness of some form made the units susceptible to the effects of some type of environmental factor, which triggered the failure mode. [14]
Although speculation arose that interference from Naval Communication Station Harold E. Holt or passenger personal electronic devices could have been involved in the incident, the ATSB assessed this possibility as "extremely unlikely". [14]
The ATSB's final report, issued on 19 December 2011, concluded that the incident "occurred due to the combination of a design limitation in the FCPC software of the Airbus A330/A340, and a failure mode affecting one of the aircraft’s three ADIRUs. The design limitation meant that in a very rare and specific situation, multiple spikes in AOA data from one of the ADIRUs could result in the FCPCs commanding the aircraft to pitch down." [14]
On 27 December 2008, a Qantas A330-300 aircraft operating from Perth to Singapore was involved in an occurrence about 260 nautical miles (480 km) north-west of Perth and 350 nautical miles (650 km) south of Learmonth Airport at 1729 WST, while flying at FL360. The autopilot disconnected and the crew received an alert indicating a problem with ADIRU no. 1. The crew performed the revised procedure released by Airbus after the earlier accident and returned to Perth uneventfully. The ATSB included the incident in their existing accident investigation of Flight 72. [24] The incident again fuelled media speculation regarding the significance of the aforementioned Harold E. Holt facility, with the Australian and International Pilots Association calling for commercial aircraft to be barred from the area as a precaution until the events could be better understood, [25] [26] while the manager of the facility claimed that it was "highly, highly unlikely" that any interference had been caused. [27]
The town and state emergency and health services responded. The Royal Flying Doctor Service and a CareFlight jet ambulance evacuated the 20 more seriously injured people to Perth. Others were treated at nearby Exmouth Hospital. Qantas sent two planes, with medical teams and customs officers, from Perth to Exmouth to help treat the injured people and fly those not hurt back to Perth. People who did not want to fly that night were provided with accommodations in Exmouth.
VH-QPA sustained minor damage; it was repaired and returned to service with Qantas. [28]
In the aftermath of the accident, Qantas offered compensation to all passengers. The airline announced it would refund the cost of all travel on their itineraries covering the accident flight, offer a voucher equivalent to a return trip to London applicable to their class of travel and pay for medical expenses arising from the accident. Further compensation claims would be considered on a case-by-case basis, [29] with several passengers from the flight pursuing legal action against Qantas. One couple asserted that they were wearing their seatbelts at the time of the incident and questioned Qantas' handling of their cases. [30] [31] Permanently injured flight attendant Fuzzy Maiava was advised not to take an NZ$35,000 compensation payment from Qantas so that he could take part in a class-action lawsuit against Airbus and Northrop Grumman. The case was dismissed on procedural grounds, though, leaving Maiava without compensation. He remained unable to work or drive a vehicle. [32]
In 2018, the events of Qantas 72 were featured in "Free Fall" (season 18, episode 7) in the Canadian TV series Mayday . [33] In May 2019, a book on the incident by Kevin Sullivan (captain of the flight) was published in Australia. [34] In June 2019, Seven Network's Sunday Night featured the events of Qantas 72 through recollections of several passengers and crew who were on board the flight, including Sullivan and flight attendant Fuzzy Maiava, as well as comments from US Airways Flight 1549 captain Chesley "Sully" Sullenberger, but Qantas has banned any of its current employees from being interviewed about the incident, including Diana Casey, an off-duty customer-service manager who helped numerous others on board, despite being injured herself. [35]
Qantas Airways Limited, or simply Qantas, is the flag carrier of Australia, and the largest airline by fleet size, international flights, and international destinations in Australia and Oceania. A founding member of the Oneworld airline alliance, it is the only airline in the world that flies to all seven continents, with it operating flights to Africa, Antarctica, Asia, Europe, North America and South America from its hubs in Sydney, Perth, Melbourne and Brisbane. It also flies to over 60 domestic destinations across Australia.
The Airbus A330 is a wide-body aircraft developed and produced by Airbus. Airbus began developing larger A300 derivatives in the mid-1970s, giving rise to the A330 twinjet as well as the A340 quadjet, and launched both designs along with their first orders in June 1987. The A330-300, the first variant, took its maiden flight in November 1992 and entered service with Air Inter in January 1994. The slightly shorter A330-200 variant followed in 1998 with Canada 3000 as the launch operator.
Trans Australia Airlines (TAA), renamed Australian Airlines in 1986, was one of the two major Australian domestic airlines between its inception in 1946 and its merger with Qantas in September 1992. As a result of the "COBRA" project, the entire airline was rebranded Qantas about a year later with tickets stating in small print "Australian Airlines Limited trading as Qantas Airways Limited" until the adoption of a single Air Operator Certificate a few years later. At that point, the entire airline was officially renamed "Qantas Airways Limited" continuing the name and livery of the parent company with the only change being the change of by-line from "The Spirit of Australia" to "The Australian Airline" under the window line with the existing "Qantas" title appearing above.
Naval Communication Station Harold E. Holt is a joint Australian and United States naval communication station located on the north-west coast of Australia, 6 kilometres (4 mi) north of the town of Exmouth, Western Australia. The station is operated and maintained by the Australian Department of Defence on behalf of Australia and the United States and provides very low frequency (VLF) radio transmission to United States Navy, Royal Australian Navy and allied ships and submarines in the western Pacific Ocean and eastern Indian Ocean. The frequency is 19.8 kHz. With a transmission power of 1 megawatt, it is claimed to be the most powerful transmission station in the Southern Hemisphere.
Air Transat Flight 236 was a transatlantic flight bound for Lisbon, Portugal, from Toronto, Canada, that lost all engine power while flying over the Atlantic Ocean on August 24, 2001. The Airbus A330 ran out of fuel because of a fuel leak caused by improper maintenance. Captain Robert Piché, 48, an experienced glider pilot, and First Officer Dirk DeJager, 28, glided the plane to a successful emergency landing in the Azores, saving all 306 people on board. Most of the passengers on the flight were Canadians visiting Europe or Portuguese expatriates returning to visit family in Portugal. This was also the longest passenger aircraft glide without engines, gliding for nearly 75 miles. Following this unusual aviation accident, this aircraft was nicknamed the "Azores Glider".
Rex Airlines Pty Ltd is an Australian regional airline based in Mascot, New South Wales. It operates scheduled regional services using turboprop aircraft. Between 2021 and 2024, Rex also operated jet services between selected major Australian cities. In July 2024 it was placed into voluntary administration.
Qantas 1 was a Qantas passenger flight between Sydney and London that was involved in a runway overrun accident at Don Mueang International Airport in Bangkok on 23 September 1999 as it was landing for a stopover.
An Air Data Inertial Reference Unit (ADIRU) is a key component of the integrated Air Data Inertial Reference System (ADIRS), which supplies air data and inertial reference information to the pilots' electronic flight instrument system displays as well as other systems on the aircraft such as the engines, autopilot, aircraft flight control system and landing gear systems. An ADIRU acts as a single, fault tolerant source of navigational data for both pilots of an aircraft. It may be complemented by a secondary attitude air data reference unit (SAARU), as in the Boeing 777 design.
A hard landing occurs when an aircraft or spacecraft hits the ground with a greater vertical speed and force than in a normal landing. The terms hard landing and firm landing are often mixed up though are inherently different. A hard landing is never intended and if an aircraft has had a hard landing, it must be inspected for damage before its next flight. In contrast, depending on aircraft type and/or environmental conditions a firm landing is intended and even demanded by the aircraft manual.
Skytraders is an Australian airline. It is headquartered at 180 Jersey Road, Woollahra, New South Wales, Australia. Skytraders was founded in 1979. It is the provider of specialist air services to the Australian Federal Government.
Qantas Flight 30, on 25 July 2008, a Boeing 747-438 operated by Qantas, construction number 25067, registration VH-OJK, was a scheduled flight from London Heathrow to Melbourne with a stopover in Hong Kong. The flight was interrupted on the Hong Kong leg by an exploding oxygen tank that ruptured the fuselage just forward of the starboard wing root. 53-year-old Captain John Bartels and his co-pilots, Bernd Werninghaus and Paul Tabac, made an emergency descent to a breathable altitude of about 10,000 feet (3,048 m) and diverted to Ninoy Aquino International Airport, Metro Manila, Philippines. There were no injuries.
On 4 September 2000, a chartered Beechcraft 200 Super King Air departed Perth for a flight to the mining town of Leonora, Western Australia. The aircraft crashed near Burketown, Queensland, Australia, resulting in the deaths of all eight occupants. During the flight, the aircraft climbed above its assigned altitude. When air traffic control (ATC) contacted the pilot, the pilot's speech had become significantly impaired, and he was unable to respond to instructions. Three aircraft intercepted the Beechcraft, but were unable to make radio contact. The aircraft continued flying on a straight north-easterly heading for five hours, before exhausting its fuel and crashing 40 mi (65 km) south-east of Burketown. The crash became known in the media as the "ghost flight".
XL Airways Germany Flight 888T (GXL888T) was an acceptance flight for an Airbus A320 on 27 November 2008. The aircraft crashed into the Mediterranean Sea, 7 km off Canet-en-Roussillon on the French coast, close to the Spanish border, killing all seven people on board. The subsequent investigation attributed the accident to incorrect maintenance procedures that allowed water to enter and freeze in the angle-of-attack sensors during flight, rendering them inoperative, combined with the crew's attempt to perform a test at a dangerously low altitude.
Emirates Flight 407 was a scheduled international passenger flight operated by Emirates from Auckland to Dubai with a stopover in Melbourne, operated by an Airbus A340-500 aircraft. On 20 March 2009, the flight failed to take off properly at Melbourne Airport, hitting several structures at the end of the runway before climbing and then returning to the airport for a safe landing. Although no fatalities or injuries resulted, damage to the aircraft was severe enough for the event to be classified by Australian Transport Safety Bureau as an "accident". It was subsequently determined that a data-entry error resulted in insufficient engine thrust during take off. It has been described "as close as we have ever come to a major aviation catastrophe in Australia" by aviation officials.
An emergency airworthiness directive (EAD) is an airworthiness directive issued when unsafe conditions require immediate action by an aircraft owner or operator. An EAD is published by a responsible authority such as the FOCA, EASA or FAA related to airworthiness and maintenance of aircraft and aircraft parts. It contains measures which must be accomplished and the related periods to preserve their airworthiness. Technical information is addressed to operators and maintenance organisations of affected aircraft only. EADs become effective upon receipt of notification.
The 2009 Pel-Air Westwind ditching or Norfolk Island ditching was an aircraft accident on 18 November 2009 near Norfolk Island, Australia. A Westwind II jet operated by Pel-Air was conducting an air ambulance flight for CareFlight International when it was forced to ditch after being unable to land in bad weather and not having sufficient fuel to divert to an alternate destination.
Cathay Pacific Flight 780 was a flight from Juanda International Airport in Surabaya, Indonesia, to Hong Kong International Airport on 13 April 2010. On board were 309 passengers and a crew of 13. As Flight 780 neared Hong Kong, the crew were unable to change the thrust output of the engines. The aircraft, an Airbus A330-300, landed at almost twice the speed of a normal landing, suffering minor damage. The 57 passengers who sustained injuries were hurt in the ensuing slide evacuation; one of them received serious injuries.
Qantas Flight 32 was a regularly scheduled passenger flight from London to Sydney via Singapore. On 4 November 2010, the aircraft operating the route, an Airbus A380, suffered an uncontained failure in one of its four Rolls-Royce Trent 900 engines. The failure occurred over the Riau Islands, Indonesia, four minutes after takeoff from Singapore Changi Airport. After holding for almost two hours to assess the situation, the aircraft made a successful emergency landing at Changi. No injuries occurred to the passengers, crew, or people on the ground, despite debris from the aircraft falling onto houses in Batam.
Richard Champion de Crespigny is an Australian Qantas pilot and author who served as pilot-in-command of Qantas Flight 32 and was widely praised for his cockpit resource management during the emergency with his crew.
{{cite news}}
: CS1 maint: multiple names: authors list (link)