Date | 25 September 1998 |
---|---|
Time | 12:26 pm (AEST) |
Duration | 20 days until normal gas supply resumed |
Venue | Esso Australia Resources Ltd. Longford Gas Plant 1 (GP1) |
Location | Longford, Victoria, Australia |
Coordinates | 38°13′26″S147°10′01″E / 38.224°S 147.167°E |
Type | Jet fire and conflagration |
Cause | Low temperature embrittlement and thermal stress of a heat exchanger |
Outcome | - Fires lasting more than two days - Gas supplies to Victoria resumed on 14 October 1998 |
Deaths | 2 |
Non-fatal injuries | 8 |
Property damage | US$443 million (US$987 million in 2021) |
Inquiries | By royal commission, 12 November 1998 – 15 April 1999 |
Coroner | Graeme Johnstone |
On 25 September 1998 a catastrophic accident occurred at the Esso natural gas plant in Longford, Victoria, Australia. [1] A pressure vessel ruptured resulting in a serious jet fire, which escalated to a conflagration extending to a large part of the plant. Fires lasted two days before they were finally extinguished.
Two workers were killed and eight others injured. [1] Natural gas supply to the state of Victoria was severely disrupted and were not fully restored until 14 October. [2] Total estimated property costs amounted to US$443 million (US$987 million in 2021), [3] while financial losses to the companies affected by the gas shortage were estimated at around A$1.3 billion. [4]
The Victorian state government established the Longford Royal Commission to publicly investigate the causes of the accident.
In 1998, the Longford gas plant was owned by a joint partnership between Esso and BHP. Esso was responsible for the operation of the plant. Esso was a wholly owned subsidiary of US-based company Exxon, which has since merged with Mobil, becoming ExxonMobil. [5]
Built in 1969, the plant at Longford is the onshore receiving point for raw natural gas output from the Marlin, Barracouta and Snapper fields in the Bass Strait, as well as crude oil from further offshore oil platforms. The plant complex consisted of three gas processing plants (Gas Plants 1, 2 and 3 or GP1, GP2 and GP3) and one crude oil stabilisation plant (CSP). [6] It was the primary provider of natural gas to Victoria and provided some supply to New South Wales.
The gas feed from the Bass Strait consisted of liquid and gaseous raw natural gas, containing methane, ethane, propane and butane, together with water vapours and hydrogen sulfide (H2S). In order to produce natural gas of commercial specifications, it was necessary to separate nearly all non-methane content. Water and hydrogen sulfide were first removed from the gas. The resulting stream still contained both liquid condensate and gaseous components. [7]
Gas Plant 1 was a lean-oil absorption plant separating methane from liquefied petroleum gas (LPG) by stripping the gas using a liquid hydrocarbon stream called "lean oil" (a light oil similar to aviation kerosene). [7] This occurred in two absorbers (working in a parallel configuration), large vertical pressure vessels in which chilled raw natural gas rose up from the bottom, on its way up shed heavier components (ethane, propane and butane) against the falling stream of lean oil and finally left the vessel at the top as methane. Lean oil, on the other hand, absorbed heavy gas components on its way down and thereby left the absorber having become "rich oil". Most of the heavier gas components left at the bottom of the absorbers in the form of LPG. [8]
Coupled with the absorbers was a system of columns, pumps and heat exchangers used to regenerate the lean oil from the rich oil stream by separating from it heavier gas components the oil had stripped from the natural gas in the absorbers. [9] [10]
Gas Plants 2 and 3, which were built in 1976 and 1983 respectively, used cryogenic technology, rather than absorption, to produce commercial-grade natural gas. [7] At the time of the accident, Longford was able to process in excess of 530 MMscfd of sales gas, 37,700 barrels per day of LPG, and 188,500 barrels per day of crude oil. [11]
There were several precursors to the breach of containment that escalated to the fire. Post-event analysis was difficult due to the complex interconnections and interactions between different plant streams. This complexity was probably also a factor that made the diagnosis of the plant upset very challenging for the operators and may have contributed to causing the accident. [12]
During the morning of Friday 25 September 1998, [lower-alpha 1] a pump supplying heated lean oil to shell-and-tube heat exchanger GP905 in Gas Plant 1 tripped. This was likely due to high level of liquid in one of the process drums, which in turn was caused by excess liquid overflowing from the demethaniser column. [14] This chain of events was probably initiated by an increase in flow from the Marlin gas field. [14]
A heat exchanger is a vessel that allows the transfer of heat from a hot stream to a cold one. It does not operate at a single temperature, but experiences a range of temperatures throughout the vessel. Temperatures through GP905 normally ranged from 60 to 230 °C (140 to 446 °F). Due to the stoppage in the flow of the heating medium and the continued inflow of cold process fluid on the shell side of the exchanger, parts of GP905 experienced temperatures as low as −48 °C (−54 °F). Ice from condensed atmospheric humidity formed on the unit shell. The same occurred elsewhere in the plant (for example on heat exchanger GP922), where cryogenic fluid was present which, under normal circumstances, would have been hot. A decision was taken to shut down the entire Gas Plant 1. [15]
Once the faulty pump was restarted, hot lean oil was pumped into the heat exchanger at 230 °C (446 °F). At 12:26 pm the steel of the exchanger outer shell, embrittled due to exposure to temperatures far below its safe design envelope, gave way due to thermal stress.
About 10 tonnes of hydrocarbon were immediately vented from the rupture and flashed. [16] A vapour cloud formed and drifted downwind. It ignited 60–90 seconds later, [17] when it reached a set of fired heaters 170 m (560 ft) away. This caused a deflagration which quickly burnt its way back to the leak source. When the flame front reached the rupture in the heat exchanger, a fierce jet fire developed. There was however no blast wave and the nearby control room was undamaged. [16] [18] [lower-alpha 2] The plant supervisor and a maintenance supervisor were killed in the initial fire. [17]
The jet fire burnt beneath a critical pipe rack section colloquially known to the operators as "King's Cross". In a case of domino effect accident, over a 30-minute period from 13:00 to 13:32, impinging flames led to three other releases of large flammable inventories. A full-blown plant conflagration ensued. [17] [21]
Complete isolation of the pipes feeding the fire required nearly two and a half days, as a result of the interconnections between the three gas plants. [21] Consequently, it was not possible to extinguish the fire until 17:30 on 27 September. [1] Many Country Fire Authority brigades were involved in fire-fighting operations. [22] Gas production, however, had been shut down immediately, and the state of Victoria was left without its primary gas supplier. Within days, VENCorp shut down the state's entire gas supply. The resulting gas supply shortage was devastating to Victoria's economy, crippling industry and the commercial sector. 1.4 million households and 89,000 businesses were affected. [1] The hospitality industry, which relied on natural gas for cooking, was heavily damaged. Loss to industry during the crisis was estimated at around A$1.3 billion. [4] As natural gas was also widely used in houses in Victoria for cooking, water heating and home heating, many Victorians endured 20 days without these facilities.
Gas supplies to Victoria resumed on 14 October. Many Victorians were outraged and upset to discover only minor compensation on their next gas bill, with the average compensation figure being only around $10.
A royal commission was called on 12 October 1998, [1] headed by former High Court judge Daryl Dawson. This was the first time a royal commission was called for an industrial accident in the state of Victoria since the collapse of the West Gate Bridge in Melbourne in 1970. [23] The Longford Royal Commission sat for 53 days, commencing with a preliminary hearing on 12 November 1998 and concluding with a closing address by Counsel Assisting the Royal Commission on 15 April 1999. [24]
Esso blamed the accident on plant operators negligence, even producing the training records of one particular operator in an attempt to show he should have known how to manage the plant upset. [25] The findings of the Longford Royal Commission, however, focused on Esso's safety practices rather than on actions by individual operators:
The causes of the accident on 25 September 1998 amounted to a failure to provide and maintain so far as practicable a working environment that was safe and without risks to health. This constituted a breach or breaches of section 21 of the [Victorian] Occupational Health and Safety Act 1985. [26]
The Longford Royal Commission's findings became key lessons learned in the domain of process safety. [27] [28] Andrew Hopkins, who was an expert witness at the royal commission, [29] based his 2000 book on Lessons from Longford on the results of the commission. [30] [25] Points of interest and lessons learned from Longford include aspects such as:
Certain managerial shortcomings were also identified:
It has been argued that Esso's safety culture was too focused on lost-time incidents of an eminently occupational safety nature and was less concerned about safe plant maintenance and operations, an attitude that may ultimately have led to the major fire. [40] The relocation of key engineers to the Melbourne office without a proper risk assessment has been indicated as a failure to carry out proper organizational management of change, a fundamental element of process safety management. [41] [32] Another aspect that may have warranted a formal change management process was the increase in heavy gas components in the feed from the offshore gas fields. While it is normal for fields like those feeding the Longford gas plants to yield heavier gas in later lifecycle phases, the creeping change should have been nonetheless assessed, and procedural or design provisions put in place accordingly. Instead, plant operators were obliged to manage the increase in condensate liquids reactively and working with what facilities they already had available. [42] [32] Other elements of process safety management that failed at Longford include leadership and culture, process safety information, hazard identification and risk analysis, operating procedures, training, incident investigation, and emergency preparedness, despite Esso "Operations Integrity Management System" nominally meeting process safety management requirements. [43] [44]
Esso was taken to the Supreme Court of Victoria by the Victorian WorkCover Authority. The jury found the company guilty of eleven breaches of the Occupational Health and Safety Act 1985, and Justice Philip Cummins imposed a record fine of A$2 million in July 2001. [45] [46] [47]
In addition, a class action was taken on behalf of businesses, industries and domestic users who were financially affected by the gas crisis. The class action went to trial in the Supreme Court on 4 September 2002, and was eventually settled in December 2004 when Esso was ordered to pay A$32 million to businesses which suffered property damage as a result of the incident. [48]
Following the Longford accident, Victoria introduced the Major Hazard Facilities Regulations to regulate safety at plants that present major process hazards (revoked in 2007). [49] The regulations imposed a non-prescriptive regime on facility operators, requiring them to demonstrate control of major hazards via the use of a safety management system and a safety case. As a result, about fifty major-hazard facilities had to develop and submit a safety case by 30 June 2002 to the regulator WorkSafe, a division of the Victorian Workcover Authority. [50] Other Australian states have also implemented similar regulatory regimes. [51]
An oil refinery or petroleum refinery is an industrial process plant where petroleum is transformed and refined into products such as gasoline (petrol), diesel fuel, asphalt base, fuel oils, heating oil, kerosene, liquefied petroleum gas and petroleum naphtha. Petrochemical feedstock like ethylene and propylene can also be produced directly by cracking crude oil without the need of using refined products of crude oil such as naphtha. The crude oil feedstock has typically been processed by an oil production plant. There is usually an oil depot at or near an oil refinery for the storage of incoming crude oil feedstock as well as bulk liquid products. In 2020, the total capacity of global refineries for crude oil was about 101.2 million barrels per day.
Piper Alpha was an oil platform located in the North Sea about 120 miles (190 km) north-east of Aberdeen, Scotland. It was operated by Occidental Petroleum (Caledonia) Limited (OPCAL) and began production in December 1976, initially as an oil-only platform, but later converted to add gas production.
The Flixborough disaster was an explosion at a chemical plant close to the village of Flixborough, North Lincolnshire, England, on Saturday, 1 June 1974. It killed 28 and seriously injured 36 of the 72 people on site at the time. The casualty figures could have been much higher if the explosion had occurred on a weekday, when the main office area would have been occupied. A contemporary campaigner on process safety wrote "the shock waves rattled the confidence of every chemical engineer in the country".
A boiling liquid expanding vapor explosion is an explosion caused by the rupture of a vessel containing a pressurized liquid that is or has reached a temperature sufficiently higher than its boiling point at atmospheric pressure. Because the boiling point of a liquid rises with pressure, the contents of the pressurized vessel can remain a liquid as long as the vessel is intact. If the vessel's integrity is compromised, the loss of pressure drops the boiling point, which can cause the liquid to convert to gas expanding rapidly. BLEVEs are manifestations of explosive boiling.
Process Safety Managementof Highly Hazardous Chemicals is a regulation promulgated by the U.S. Occupational Safety and Health Administration (OSHA). It defines and regulates a process safety management (PSM) program for plants using, storing, manufacturing, handling or carrying out on-site movement of hazardous materials above defined amount thresholds. Companies affected by the regulation usually build a compliant process safety management system and integrate it in their safety management system. Non-U.S. companies frequently choose on a voluntary basis to use the OSHA scheme in their business.
The Texas City refinery explosion occurred on March 23, 2005, when a flammable hydrocarbon vapor cloud ignited and violently exploded at the isomerization process unit of the BP oil refinery in Texas City, Texas, killing 15 workers, injuring 180 others and severely damaging the refinery. All the fatalities were contractors working out of temporary buildings located close to the unit to support turnaround activities. Property loss was $200 million. When including settlements, costs of repairs, deferred production, and fines, the explosion is the world's costliest refinery accident.
In the chemical and process industries, a process has inherent safety if it has a low level of danger even if things go wrong. Inherent safety contrasts with other processes where a high degree of hazard is controlled by protective systems. As perfect safety cannot be achieved, common practice is to talk about inherently safer design. “An inherently safer design is one that avoids hazards instead of controlling them, particularly by reducing the amount of hazardous material and the number of hazardous operations in the plant.”
Longford is a town in the Gippsland region of Victoria, Australia. According to the 2006 census, Longford and the surrounding area had a population of 929.
Trevor Asher Kletz, OBE, FREng, FRSC, FIChemE was a prolific British author on the topic of chemical engineering safety. He was a central figure in establishing the discipline of process safety. He is credited with introducing the concept of inherent safety and was a major promoter of Hazop. He is listed in The Palgrave Dictionary of Anglo-Jewish History.
The Formosa Plastics propylene explosion was a propylene release and explosion that occurred on October 6, 2005, in the Olefins II Unit at the Formosa Plastics plant in Point Comfort, Texas, United States. The subsequent fire burned for five days.
The U.S. Chemical Safety and Hazard Investigation Board (USCSB), generally referred to as the Chemical Safety Board (CSB), is an independent U.S. federal agency charged with investigating industrial chemical accidents. Headquartered in Washington, D.C., the agency's board members are appointed by the president and confirmed by the United States Senate. The CSB conducts root cause investigations of chemical accidents at fixed industrial facilities.
ExxonMobil Australia is an Australian affiliate of ExxonMobil, the U.S.-based oil giant. It operates a number of oil and gas platforms in Bass Strait, south east of Melbourne, Australia, as well as a gas processing facility at Longford and Long Island Point (LIP) in Hastings.
The West Pharmaceutical Plant explosion was an industrial disaster that occurred on January 29, 2003 at the West Pharmaceutical Plant in Kinston, North Carolina, United States. Six people were killed and thirty-six people were injured when a large explosion ripped through the facility. Two firefighters were injured in the subsequent blaze. The disaster occurred twelve years and 170 miles (270 km) from the 1991 Hamlet chicken processing plant fire, North Carolina's second-worst industrial disaster.
Process safety is an interdisciplinary engineering domain focusing on the study, prevention, and management of large-scale fires, explosions and chemical accidents in process plants or other facilities dealing with hazardous materials, such as refineries and oil and gas production installations. Thus, process safety is generally concerned with the prevention of, control of, mitigation of and recovery from unintentional hazardous materials releases that can have a serious effect to people, plant and/or the environment.
Fawley Refinery is an oil refinery located at Fawley, Hampshire, England. The refinery is owned by Esso Petroleum Company Limited, a subsidiary of Exxon Mobil Corporation, which acquired the site in 1925. Situated on Southampton Water, it was rebuilt and extended in 1951 and is now the largest oil refinery in the United Kingdom, and one of the most complex refineries in Europe. With a capacity of 270,000 barrels (43,000 m3) per day, Fawley provides 20 per cent of the UK's refinery capacity. Over 2,500 people are employed at the site.
The San Juanico disaster involved a series of fires and explosions at a liquefied petroleum gas (LPG) tank farm in the settlement of San Juan Ixhuatepec, municipality of Tlalnepantla de Baz, State of Mexico, Mexico on 19 November 1984. The facility and the settlement, part of Greater Mexico City, were devastated, with 500–600 victims killed, and 5000–7000 suffering severe burns. It is one of the deadliest industrial disasters in world history, and the deadliest industrial accident involving fires and/or explosions from hazardous materials in a process or storage plant since the Oppau explosion in 1921.
The AcciMap approach is a systems-based technique for accident analysis, specifically for analysing the causes of accidents and incidents that occur in complex sociotechnical systems.
A domino effect accident is an accident in which a primary undesired event sequentially or simultaneously triggers one or more secondary undesired events in nearby equipment or facilities, leading to secondary accidents more severe than the primary event. Thus, a domino effect accident is actually a chain of multiple events, which can be likened to a falling row of dominoes. The term knock-on accident is also used.
An explosion at the ARCO Chemical (ACC) Channelview, Texas petrochemical plant killed 17 people and injured five others on July 5, 1990. It was one of the deadliest industrial disasters in the history of the Greater Houston area.