Crash of an Airbus A320-211 in Halifax

Date & Time:
Type of aircraft:
Operator:
Registration:
C-FTJP
Survivors:
Yes
Schedule:
Toronto – Halifax
MSN:
233
YOM:
1991
Flight number:
AC624
Country:
Crew on board:
5
Crew fatalities:
Pax on board:
133
Pax fatalities:
Other fatalities:
Total fatalities:
0
Captain / Total flying hours:
11765
Captain / Total hours on type:
5755.00
Copilot / Total flying hours:
11300
Copilot / Total hours on type:
6392
Aircraft flight hours:
75103
Circumstances:
On 29 March 2015, an Air Canada Airbus Industrie A320-211 (registration C-FTJP, serial number 233), operating as Air Canada flight 624, was on a scheduled flight from Toronto/Lester B. Pearson International Airport, Ontario, to Halifax/Stanfield International Airport, Nova Scotia, with 133 passengers and 5 crew members on board. At approximately 0030 Atlantic Daylight Time, while conducting a non-precision approach to Runway 05, the aircraft severed power lines, then struck the snow-covered ground about 740 feet before the runway threshold. The aircraft continued airborne through the localizer antenna array, then struck the ground twice more before sliding along the runway. It came to rest on the left side of the runway, about 1900 feet beyond the threshold. The aircraft was evacuated; 25 people sustained injuries and were taken to local hospitals. The aircraft was destroyed. There was no post-impact fire. The emergency locator transmitter was not activated. The accident occurred during the hours of darkness.
Probable cause:
Findings as to causes and contributing factors:

1. Air Canada’s standard operating procedure (SOP) and practice when flying in flight path angle guidance mode was that, once the aircraft was past the final approach fix, the flight crews were not required to monitor the aircraft’s altitude and distance from the threshold or to make any adjustments to the flight path angle. This practice was not in accordance with the flight crew operating manuals of Air Canada or Airbus.
2. As per Air Canada’s practice, once the flight path angle was selected and the aircraft began to descend, the flight crew did not monitor the altitude and distance from the threshold, nor did they make any adjustments to the flight path angle.
3. The flight crew did not notice that the aircraft had drifted below and diverged from the planned vertical descent angle flight profile, nor were they aware that the aircraft had crossed the minimum descent altitude further back from the threshold.
4. Considering the challenging conditions to acquire and maintain the visual cues, it is likely the flight crew delayed disconnecting the autopilot until beyond the minimum descent altitude because of their reliance on the autopilot system.
5. The approach and runway lights were not changed from setting 4 to setting 5; therefore, these lights were not at their maximum brightness setting during the approach.
6. The system to control the airfield lighting’s preset selections for brightness setting 4 was not in accordance with the NAV CANADA Air Traffic Control Manual of Operations requirement for the omnidirectional approach lighting system to be at its brightest settings.
7. The limited number of visual cues and the short time that they were available to the flight crew, combined with potential visual illusions and the reduced brightness of the approach and runway lights, diminished the flight crew’s ability to detect that the aircraft’s approach path was taking it short of the runway.
8. The flight crew’s recognition that the aircraft was too low during the approach would have been delayed because of plan continuation bias.
9. The aircraft struck terrain approximately 740 feet short of the runway threshold, bounced twice, and then slid along the runway before coming to a rest approximately 1900 feet beyond the runway threshold.
10. At some time during the impact sequence, the captain’s head struck the glare shield because there were insufficient acceleration forces to lock the shoulder harness and prevent movement of his upper body.
11. The first officer sustained a head injury and serious injury to the right eye as a result of striking the glare shield because the automatic locking feature of the right-side shoulder-harness inertia reel was unserviceable.
12. A flight attendant was injured by a coffee brewer that came free of its mounting base because its locking system was not correctly engaged.
13. Because no emergency was expected, the passengers and cabin crew were not in a brace position at the time of the initial impact.
14. Most of the injuries sustained by the passengers were consistent with not adopting a brace position.

Findings as to risk:

1. If aircraft cockpit voice recorder installations do not have an independent power supply, additional, potentially valuable information will not be available for an investigation.
2. If Transport Canada does not consistently follow its protocol for the assessment of aeromedical risk and ongoing surveillance in applicants who suffer from obstructive sleep apnea, some of the safety benefit of medical examinations will be lost, increasing the risk that pilots will fly with a medical condition that poses a risk to safety.
3. If new regulations on the use of child-restraint systems are not implemented, lap-held infants and young children are exposed to undue risk and are not provided with a level of safety equivalent to that for adult passengers.
4. If passengers do not dress appropriately for safe travel, they risk being unprepared for adverse weather conditions during an emergency evacuation.
5. If the type of approach lighting system on a runway is not factored into the minimum visibility required to carry out an approach, in conditions of reduced visibility, the lighting available risks being less than adequate for flight crews to assess the aircraft’s position and decide whether or not to continue the approach to a safe landing.
6. If they do not incorporate a means of absorbing forces along their longitudinal axis, vertically mounted, non-structural beams (channels, tubes, etc.) in cargo compartments could penetrate the cabin floor when the fuselage strikes the water or ground, increasing the risk of aircraft occupants being injured or emergency egress being impaired.
7. If an aircraft manufacturer’s maintenance instructions do not include the component manufacturer’s safety-critical test criteria, the component risks not being maintained in an airworthy condition.
8. If there is a complete loss of electrical and battery power and the passenger address system does not have an independent emergency power supply, the passenger address system will be inoperable, and the initial command to evacuate or to convey other emergency instructions may be delayed, putting the safety of passengers and crew at risk.
9. If passengers retrieve or attempt to retrieve their carry-on baggage during an evacuation, they are putting themselves and other passengers at a greater risk of injury or death.
10. If passengers do not pay attention to the pre-departure safety briefings or review the safety-features cards, they may be unprepared to react appropriately in an accident, increasing their risk of injury or death.
11. If an organization’s emergency response plan does not identify all available transportation resources, there is an increased risk that evacuated passengers and crew will not be moved from an accident site in a timely manner.
12. If organizations do not practise transporting persons from an on-airport accident site, they may be insufficiently prepared to react appropriately to an actual accident, which may increase the time required to evacuate the passengers and crew.

Other findings:

1. The service director assessed the evacuation flow as good and determined that there was therefore no need to open the R1 door.
2. The flight attendants stationed in the rear of the aircraft noted no life-threatening hazards. Because no evacuation order had been given, and deplaned passengers and firefighters were observed walking near the rear of the aircraft in an area where the deployment of the rear slides may have created additional hazards or risks, the flight attendants determined that there was no requirement to open the L2 and R2 doors.
3. Although Transport Canada required the dual-exit drill to be implemented in training, it did not require all cabin crew to receive the training before an organization implemented the 1:50 ratio.
4. At the time of the accident, neither the service director nor the flight attendants had received the dual-exit training, nor were they aware of the requirement for such training in order for Air Canada to operate with the exemption allowing 1 flight attendant for each unit of 50 passengers.
5. Although Transport Canada had reviewed and approved Air Canada’s aircraft operating manual and the standard operating procedures (SOPs), it had not identified the discrepancy between the Air Canada SOPs and the Airbus flight crew operating manual regarding the requirement to monitor the aircraft’s vertical flight path beyond the final approach fix when the flight path angle guidance mode is engaged.
6. A discrepancy in the Halifax International Airport Authority’s standby generators’ control circuitry caused the 2 standby generators to stop producing power.
7. Air Canada’s emergency response plan for Halifax/Stanfield International Airport indicated that the airline was responsible for the transportation of passengers from an accident site.
8. Air Canada’s emergency response plan did not identify the airport’s Park’N Fly minibuses as transportation resources. 9. The Halifax International Airport Authority’s emergency response plan did not identify that the airport Park’N Fly mini-buses could be used to transport the uninjured passengers, nor did it provide instructions on when and how to request and dispatch any transportation resources available at the airport.
10. The Air Canada Flight Operations Manual did not identify that the required visual reference should enable the pilot to assess aircraft position and rate of change of position in order to continue the approach to a landing.
11. In Canada, the minimum visibility that is authorized by the operations specification for non-precision approaches does not take into account the type of approach lighting system installed on the runway.
12. It is likely that, during the emergency, a passenger activated the L1 door gust lock release pushbutton while trying to expedite his or her exit, which allowed the door to move freely.
13. The passenger seatbacks were dislodged because the shear pins had sheared, likely as a result of contact with passengers during the impact sequence or emergency egress.
14. Recovery of the uninjured passengers from the accident site was delayed owing to a number of factors, including the severe weather conditions; the failure of the airport’s 2 standby generators to provide backup power after the loss of utility power; the loss of the airport operations radio network; and the lack of arrangements for the dispatch of transportation vehicles until after emergency response services had advised that all passengers were evacuated and the site was all clear.
15. Given that the captain rarely used continuous positive airway pressure therapy, he would have been at risk of experiencing fatigue related to chronic sleep disruption caused by obstructive sleep apnea. However, there was no indication that fatigue played a causal or contributory role in this occurrence.
Final Report:

Crash of an Airbus A320-211 near Prads-Haute-Bléone: 150 killed

Date & Time:
Type of aircraft:
Operator:
Registration:
D-AIPX
Flight Phase:
Survivors:
No
Site:
Schedule:
Barcelona – Düsseldorf
MSN:
147
YOM:
1990
Flight number:
4U9525
Country:
Region:
Crew on board:
6
Crew fatalities:
Pax on board:
144
Pax fatalities:
Other fatalities:
Total fatalities:
150
Captain / Total flying hours:
6763
Captain / Total hours on type:
3811.00
Copilot / Total flying hours:
919
Copilot / Total hours on type:
540
Aircraft flight hours:
58313
Aircraft flight cycles:
46748
Circumstances:
The aircraft left Barcelona at 1000LT on a scheduled flight to Düsseldorf (flight 4U9525/GWI18G). At 1032LT, one minute after reaching its assigned cruising altitude of 38,000 feet near Toulon (level off), the aircraft started to lose altitude and continued a straight in descent during nine minutes, until it reached the altitude of 6,800 feet. It was later confirmed that no distress call was sent by the crew. Radar contact was lost at a height of 6,800 feet at 1041LT when the aircraft hit a mountain slope located near Prads-Haute-Bléone, northeast of Digne-les-Bains. At the time of the accident, weather conditions were considered as good with no storm activity, reasonable wind component and no turbulence. The crash site was reached by first rescuers in the afternoon and the aircraft disintegrated on impact. None of the 150 occupants survived the crash. The second black box (DFDR) was found on April 2, nine days after the accident.
Probable cause:
The collision with the ground was due to the deliberate and planned action of the copilot who decided to commit suicide while alone in the cockpit. The process for medical certification of pilots, in particular self-reporting in case of decrease in medical fitness between two periodic medical evaluations, did not succeed in preventing the copilot, who was experiencing mental disorder with psychotic symptoms, from exercising the privilege of his licence. The following factors may have contributed to the failure of this principle:
-The copilot’s probable fear of losing his ability to fly as a professional pilot if he had reported his decrease in medical fitness to an AME,
-The potential financial consequences generated by the lack of specific insurance covering the risks of loss of income in case of unfitness to fly,
- The lack of clear guidelines in German regulations on when a threat to public safety outweighs the requirements of medical confidentiality.
Security requirements led to cockpit doors designed to resist forcible intrusion by unauthorized persons. This made it impossible to enter the flight compartment before the aircraft impacted the terrain in the French Alps.
Final Report:

Crash of an Airbus A320-216 into the Java Sea: 162 killed

Date & Time:
Type of aircraft:
Operator:
Registration:
PK-AXC
Flight Phase:
Survivors:
No
Schedule:
Surabaya – Singapore
MSN:
3648
YOM:
2008
Flight number:
QZ8501
Country:
Region:
Crew on board:
6
Crew fatalities:
Pax on board:
156
Pax fatalities:
Other fatalities:
Total fatalities:
162
Captain / Total flying hours:
20537
Captain / Total hours on type:
4687.00
Copilot / Total flying hours:
2247
Copilot / Total hours on type:
1367
Aircraft flight hours:
23039
Aircraft flight cycles:
13610
Circumstances:
The aircraft left Surabaya-Juanda Airport at 0535LT and climbed to its assigned altitude of FL320 that he reached 19 minutes later. The crew contacted ATC to obtain the authorization to climb to FL380 and to divert to 310° due to bad weather conditions. At 0617, the radio contact was lost with the crew and a minute later, the transponder stopped when the aircraft disappeared from the radar screen. At this time, the aircraft was flying at the altitude of 36,300 feet and its speed was decreasing to 353 knots. It is believed the aircraft crashed some 80 nautical miles southeast off the Pulau Belitung Island, some 200 km from the Singapore Control Area. The Indonesian Company confirmed there were 156 Indonesian Citizens on board, three South Korean, one Malaysian, one Singapore and one French (the copilot) as well. At the time of the accident, the weather conditions were marginal with storm activity, rain falls and turbulence in the area between Pulau Belitung and Kalimantan. First debris were spotted by the Indonesian Navy some 48 hours later, about 150 NM east-south-east off the Pulau Belitung Island. About forty dead bodies were found up to December 30. The tail was recovered on January 10, 2015 and the black boxes were localized a day later. On January 12 and 13 respectively, the DFDR and the CVR were out of water and sent to Jakarta for analysis and investigations.
Probable cause:
The cracking of a solder joint of both channel A and B resulted in loss of electrical continuity and led to RTLU (rudder travel limiter unit) failure.
The existing maintenance data analysis led to unresolved repetitive faults occurring with shorter intervals. The same fault occurred 4 times during the flight.
The flight crew action to the first 3 faults in accordance with the ECAM messages. Following the fourth fault, the FDR recorded different signatures that were similar to the FAC CB‟s being reset resulting in electrical interruption to the FAC‟s.
The electrical interruption to the FAC caused the autopilot to disengage and the flight control logic to change from Normal Law to Alternate Law, the rudder deflecting 2° to the left resulting the aircraft rolling up to 54° angle of bank.
Subsequent flight crew action leading to inability to control the aircraft in the Alternate Law resulted in the aircraft departing from the normal flight envelope and entering prolonged stall condition that was beyond the capability of the flight crew to recover.
Final Report: