American Airlines Flight 96 (AA96/AAL96) was a regular domestic flight operated by American Airlines from Los Angeles to New York via Detroit and Buffalo. On June 12, 1972, the left rear cargo door of the McDonnell Douglas DC-10-10 operating the flight blew open and broke off above Windsor, Ontario, after takeoff from Detroit, Michigan; the accident is thus sometimes referred to as the Windsor incident, although according to the NTSB it is an accident, not an incident.[2]
The rapid decompression in the cargo hold caused a partial collapse of the passenger compartment floor, which in turn jammed or restricted some of the control cables which were connected to various flight control hydraulic actuators. The jamming of the rudder control cable caused the rudder to deflect to its maximum right position. The control cables to the number two engine in the tail were severed, causing that engine to shut down.[1] There was no rupture of any hydraulic system, so the pilots still had control of the ailerons, the right elevator, and the horizontal stabilizer. Because the right elevator cable was partially restricted, however, both pilots had to apply back pressure on the yoke for the landing flare. Additionally, the approach and landing had to be made at high speed to prevent the sink rate from becoming too high. The tendency to turn right was offset by using 45 degrees of left aileron, combined with an asymmetrical thrust of the two wing engines. In spite of the partial restriction of the controls, the pilots managed to return to Detroit Metropolitan Airport and land safely, with no major injuries.[3]
The cause was traced to the cargo door latching system, which had failed to close and latch the door completely without any indication to the crew that it was not safely closed. A separate locking system was supposed to ensure this could not happen but proved to be inadequate. McDonnell Douglas instituted a number of minor changes to the system in an attempt to avoid a repeat. These were unsuccessful, however; on March 3, 1974, the rear cargo door of Turkish Airlines Flight 981 experienced the same failure and blew open, causing the aircraft to lose all control and crash in a forest near Paris, France. This crash killed all 346 people on board, making it the deadliest in aviation history until the 1977 Tenerife airport disaster and the deadliest single-aircraft crash until the 1985 crash of Japan Airlines Flight 123.[3]
Aircraft
The aircraft involved in the accident was a McDonnell Douglas DC-10-10, registered as N103AA, MSN 46503. It was delivered to American Airlines in July 1971 and was equipped with three General Electric CF6-6D engines.[4][5]
Accident details
Flight 96 was a regularly scheduled flight from Los Angeles International Airport to LaGuardia Airport with intermediate stops at Detroit Metropolitan Airport and Buffalo Niagara International Airport. On June 12, it was being flown by a DC-10-10, registration N103AA, with a flight crew consisting of Captain Bryce McCormick (age 52); First Officer Peter "Page" Whitney (34); and Flight Engineer Clayton Burke (50). McCormick was a highly experienced pilot, having amassed more than 24,000 flight hours throughout his flying career. Whitney and Burke were also seasoned airmen with approximately 7,900 flight hours and 13,900 flight hours, respectively, under their belts. Among them, the crew had accumulated 176 hours of flight time in the DC-10.[1]
The flight left Los Angeles 46 minutes after its scheduled 1:30 pm departure due to passenger loading and traffic and arrived in Detroit at 6:36 pm. In Detroit, the majority of the passengers disembarked, and the aircraft took on new passengers and cargo. Leaving Detroit, the aircraft had 56 passengers and 11 crew. The aircraft departed at 7:20 pm, climbing to 6,000 ft for a hold, before capturing V-554 (a victor airway) and climbing toward 21,000 ft (FL210).[1]
At 7:25 pm, while climbing through 11,750ft, at 260 knots, the crew heard a distinct "thud" and dirt in the cockpit flew up into their faces. The "thud" was the sound of the rearmost cargo door breaking off, causing a sudden decompression that also caused part of the floor at the rear of the cabin to partially give way. Captain McCormick momentarily believed they had suffered a mid-air collision and the cockpit windows had been smashed. At the same time, the rudder pedals moved to their full-right position and the engine controls moved to idle. McCormick immediately took manual control of the aircraft and attempted to re-apply power, finding that engines 1 and 3 would respond normally, but engine 2, in the tail, would not allow its controls to be moved, as control cables had been severed when the floor gave way. McCormick managed to level off and stabilize the speed at 250 knots, although at this speed control was very sluggish. They declared an emergency and requested routing back to Detroit.[6]
During the decompression, a sizeable quantity of the cargo stored in the hold was sucked through the destroyed cargo door and ejected from the DC-10; this included a 6-foot long casket with a body inside, which was being transported to Buffalo.[7]
In the cabin, the flight attendants saw a "fog" form within the cabin and immediately recognized it as a depressurization. Two crews were in the rear lounge area, and the floor under their feet partially collapsed into the cargo hold, giving them both minor injuries. In spite of this, the cabin crew immediately attempted to ensure the oxygen masks had deployed properly, but having occurred below the 14,000ft limit, the masks had not deployed. One of the attendants obtained a walk-around oxygen bottle and called the cockpit on the intercom to inform them that the damage was in the rear of the aircraft. On instructions from the cockpit, the attendants instructed the passengers on emergency landing procedures. A number of passengers later reported that the aircraft safety cards proved useful in locating the nearest exit.
The aircraft returned to Detroit, but, when the crew set the flaps to 35 degrees for landing, the aircraft stabilized in a 1,900ft/min descent rate that was far too fast for landing. By applying power to the No. 1 and No. 3 Engines, McCormick managed to level off the nose and reduce the descent rate to 700ft/min. At 7:44 pm, the aircraft touched down 600m (1,900ft) down runway 03R, immediately veering to the right and eventually leaving the runway surface. First Officer Whitney applied full reverse thrust to the left engine and idled the right, straightening the aircraft's path, and eventually starting to bring the aircraft back to the runway. The aircraft stopped 270m (880ft) from the end of the runway, with the nose and left gear on the runway and the right on the grass beside it.[8] It happened that while training to convert his expertise to flying the DC-10, McCormick had practiced, in a simulator, controlling the plane with the throttles in this fashion, in the worst-case scenario of a hydraulic failure.[2] A similar technique was used on another DC-10 in 1989 following a complete loss of hydraulic pressure on United Airlines Flight 232.[9]
Investigation
The cargo door after being ripped off
The problem that caused the accident was immediately obvious, as the rear cargo door was missing and had caused severe damage to the left horizontal stabilizer as it blew off. Investigators immediately studied the maintenance history and found that on March 3, 1972, three months before the accident, the handlers reported that the door had not latched electrically and had to be closed manually. On May 30, McDonnell Douglas issued Service Bulletin 52–27, DC-10 SC 612, which called for the upgrading of the electrical wiring that drove the latches because "Three operators have reported failure of the electrical latch actuators to latch/unlatch the cargo doors. Latch actuator failure is attributed to an excessive voltage drop reducing the output torque to the actuator. This condition may prevent electrical latching/unlatching of the hooks."[1] The modification was not compulsory, however, and had not been carried out on N103AA, the plane involved in the accident.[citation needed]
Investigators interviewed the ground crew in Detroit and learned that the cargo loader who operated the rear door had found it extremely difficult to close. He stated that he closed the door electrically, and waited for the sound of the actuator motors to stop. When they did, he attempted to operate the locking handle but found it very difficult to close. He managed to get the latch to lock only by applying force with his knee, but he noticed that the vent plug (see below) was not entirely closed. He brought this to the attention of a mechanic, who cleared the flight. The flight engineer reported that the "door ajar" warning light on his panel was not lit at any time during the taxi out or flight.[1]
Examination of the aircraft and the cargo door, which was recovered largely intact in Windsor, demonstrated that the latches had never rotated to their locked position. In their locked position, pressure on the door presses the latches further shut, and no force is transmitted into the actuator system that closes and opens them. With the latches only partially closed, forces on the door were transmitted back into the actuator, eventually overwhelming it at about 6,600lbf. The rapid depressurization when the door broke off caused the floor above it to partially cave in, which pulled the rudder cable to its extension limit and severed several other operating cables.[citation needed]
Passenger doors on the DC-10 are of the plug variety, which prevents the doors from opening while the aircraft is pressurized. The cargo door, however, is not. Due to its large area, the cargo door on the DC-10 could not be swung inside the fuselage without taking up a considerable amount of valuable cargo space. Instead, the door swung outward, allowing cargo to be stored directly behind it. The outward-opening door, in theory, allowed it to be "blown open" by the pressure inside the cargo area.
To prevent this, the DC-10 used a "fail-safe" latching system held in place by "over top dead center latches", five C-shaped latches mounted on a common torque shaft that are rotated over fixed latching pins ("spools") fixed to the fuselage. Because of their shape, when the latches are in the proper position, pressure on the door does not place torque on the latches that could cause them to open, and further seats them on the pins. Normally the latches are opened and closed by a screw jack powered by an electric actuator motor.
Because the wiring powering the actuator motor was too small, it was possible for the voltage delivered to the motor to drop too low for it to operate as designed under high loads. In these cases, the motor would stop turning even if the latches had not rotated over the pins. Since the operators listened for the motors to stop as an indication of their complete rotation, a failure in the drive system during operation would erroneously indicate that the door was properly latched.
To ensure this rotation had completed and the latches were in the proper position, the DC-10 cargo door also included a separate locking mechanism. The locks consisting of small pins that were slid horizontally through holes on the back of the latches, between the latch and the frame of the aircraft. When the pins were in place, they mechanically prevented movement back into the open position, so even the actuator motor could no longer open them. If the latches were not in their correct positions, the pins could not enter the holes, and the operating handle on the outside of the door would remain open and visually indicate that there was a problem. Additionally, the handle moved a metal plug into a vent cut in the outer door panel; if the vent was not plugged the door would not retain pressure, eliminating any force on the door. Lastly, there was an indicator light in the cockpit that would remain on if the door was not correctly latched.
In theory, motor failure on the plane could not present a problem because it would fail to close the locking lever. During the investigation, however, a McDonnell Douglas test rig demonstrated that the entire locking pin operating system was too weak, allowing the handle to be forced closed even with the pins out of the locking holes. This occurred on Flight 96, when the handler forced the handle closed with his knee. In spite of the vent not closing completely, neither the handler nor the engineer considered this to be serious. Although the vent door remained partially open, it closed enough to cause it to "blow shut", and thereby allow pressurization of the cargo hold. Although the handle did not seat the pins entirely, the small amount of motion it managed to cause was enough to press on the warning indicator switch, deactivating the cockpit warning light. It was only the combination of all of these failures that allowed the accident to happen. Yet all of these indicators shared a single point of failure: the mechanical weakness of the locking system that allowed the handle to be moved.
The cabin floor failure was also a matter of poor design. All of the other portions of the cargo holds had holes cut into the cabin floor above the cargo areas. In the case of a pressure loss on either side of the floor, the air would flow through the vents and equalize the pressure, thereby eliminating any force on the floor. Only the rearmost portion of the cabin lacked these holes, and it was that portion that failed. Because the control cables were running through the floor for the entire length of the aircraft, however, a failure at any point on the floor would cut controls to the tail section.
Aftermath
The National Transportation Safety Board suggested two changes to the DC-10 to ensure that the Windsor accident would not reoccur: changes to the locking mechanism to ensure it could not be forced closed, as well as venting cut into the rear cabin floor.[1]:12
In response, the Federal Aviation Administration, in charge of implementing these recommendations, agreed with McDonnell Douglas that the additional venting would be difficult to install. Instead, they proceeded with the modification of the locking system and additionally added a small clear window set into the bottom of the cargo door that allowed operators to directly inspect whether or not the latches were in place. Combined with the upgrades to the wiring that had already been on the books, this was expected to prevent a repeat of the accident.
Shortly after the event, Dan Applegate, Director of Product Engineering at Convair, wrote a memo to Convair management pointing out several problems with the door design. McDonnell Douglas had subcontracted design and construction of the DC-10 fuselage to Convair, and Applegate had overseen its development in ways that he felt were reducing the safety of the system. In particular, he noted that the actuator system had been switched from a hydraulic system to an electrical one, which he felt was less safe. He also noted that the floor would be prone to failure if the door was lost, and this would likely sever the control cables, leading to a loss of the aircraft. Finally, he pointed out that this precise failure had already occurred in ground testing in 1970, and he concluded that such an accident was almost certain to occur again in the future.[10]
In spite of these recommendations, on March 3, 1974, less than two years after the near-loss of Flight 96, Turkish Airlines Flight 981 crashed outside Paris, killing all 346 passengers and crew on board in an identical rear cargo door failure. Unlike Flight 96, where the crew still managed to keep enough flight controls to safely return to Detroit, the pilots of Flight 981 completely lost control of the tail surfaces and all hydraulics. Investigators discovered that the upgrades had never been carried out on this airframe, although the construction logs claimed they had been. One modification had been carried out, the installation of the inspection window, along with a placard beside the door controls printed in English and Turkish that informed the operators how to inspect the latches. The operator in Paris was Algerian and could not read either language and had been instructed that as long as the locking handle closed, the door was safe. He also noted that he did not have to force the handle, and investigators concluded that it had already been bent on a prior flight.[11]
In the aftermath of Flight 981, the Applegate memorandum was discovered and introduced into evidence during the massive civil lawsuit that followed. Many commentators subsequently blamed the aircraft manufacturer, McDonnell Douglas, and other aviation authorities, for failing to learn lessons from the Flight 96 accident. Although there had been some redesign of the DC-10 cargo door system, it had only been implemented voluntarily and haphazardly by various airlines. If the warning signs of Flight 96 had been heeded, it is likely that the crash of Flight 981 would have been prevented.[10][12] A complete redesign of the entire door system followed, and no DC-10 or MD-11 ever suffered a similar accident again.
N103AA was repaired and returned to service with American Airlines. It was withdrawn from use in October 1993 and placed into storage until August 2002 when the aircraft was scrapped at Phoenix Goodyear Airport.[13][14]
The episode "Crash Detectives" of Survival in the Sky featured the accident, as well as the crash of Turkish Flight 981.[citation needed]
Awards
The entire flight crew was awarded American Airlines' highest honor, The Distinguished Service Award for Merit: Bryce McCormick (Captain), R. Paige Whitney (First Officer), Clayton Burke (Flight Engineer), Cydya Joyce Smith (Purser), Bea Copeland, Janice Hickingbottom, Colleen Maley, Sandra McConnell, Carol Kay McGhee, Marlene Saydah and Carol Stevens (Flight Attendants).[16]
The McDonnell Douglas DC-10 is an American trijet wide-body aircraft manufactured by McDonnell Douglas. The DC-10 was intended to succeed the DC-8 for long-range flights. It first flew on August 29, 1970; it was introduced on August 5, 1971, by American Airlines.
American Airlines Flight 191 was a regularly scheduled domestic passenger flight from O'Hare International Airport in Chicago to Los Angeles International Airport. On the afternoon of May 25, 1979, the McDonnell Douglas DC-10 operating this flight was taking off from runway 32R at O'Hare International when its left engine detached from the wing, causing a loss of control, and the aircraft crashed about 4,600 feet (1,400 m) from the end of runway 32R. All 271 occupants on board were killed, along with two people on the ground. With 273 fatalities, it is the deadliest aviation accident to have occurred in the United States.
Turkish Airlines Flight 981 (TK981/THY981) was a scheduled flight from Istanbul Yeşilköy Airport to London Heathrow Airport, with an intermediate stop at Orly Airport in Paris. On 3 March 1974, the McDonnell Douglas DC-10 operating the flight crashed into the Ermenonville Forest, 37.76 kilometres (23.46 mi) outside Paris, killing all 335 passengers and 11 crew on board. The crash was also known as the Ermenonville air disaster.
The McDonnell Douglas MD-80 is a series of five-abreast single-aisle airliners developed by McDonnell Douglas. It was produced by the developer company until August 1997 and then by Boeing Commercial Airplanes. The MD-80 was the second generation of the DC-9 family, originally designated as the DC-9-80 and later stylized as the DC-9 Super 80 . Stretched, enlarged wing and powered by higher bypass Pratt & Whitney JT8D-200 engines, the aircraft program was launched in October 1977. The MD-80 made its first flight on October 18, 1979, and was certified on August 25, 1980. The first airliner was delivered to launch customer Swissair on September 13, 1980, which introduced it into service on October 10, 1980.
ValuJet Airlines Flight 592 was a regularly scheduled flight from Miami to Atlanta. On May 11, 1996, the ValuJet Airlines McDonnell Douglas DC-9 operating the route crashed into the Florida Everglades about ten minutes after departing Miami as a result of a fire in the cargo compartment probably caused by mislabeled and improperly stored hazardous cargo. All 110 people on board were killed.
The McDonnell Douglas MD-11 is an American tri-jet wide-body airliner manufactured by American manufacturer McDonnell Douglas (MDC) and later by Boeing. Following DC-10 development studies, the MD-11 program was launched on December 30, 1986. Assembly of the first prototype began on March 9, 1988. Its maiden flight occurred on January 10, 1990, and it achieved Federal Aviation Administration (FAA) certification on November 8. The first delivery was to Finnair on December 7 and it entered service on December 20, 1990.
On August 16, 1987, a McDonnell Douglas MD-82, operating as Northwest Airlines Flight 255, crashed shortly after takeoff from Detroit Metropolitan Airport, about 8:46 pm EDT, resulting in the deaths of all six crew members and 148 of the 149 passengers, along with two people on the ground. The sole survivor was a 4-year-old girl who sustained serious injuries. It was the second-deadliest aviation accident at the time in the United States. It is also the deadliest aviation accident to have a sole survivor, the deadliest aircraft accident in the history of the state of Michigan, and the worst crash in the history of Northwest Airlines.
United Airlines Flight 811 was a regularly scheduled international flight from Los Angeles to Sydney, with intermediate stops at Honolulu and Auckland. On February 24, 1989, the Boeing 747-122 serving the flight experienced a cargo-door failure in flight shortly after leaving Honolulu. The resulting explosive decompression blew out several rows of seats, killing nine passengers. The aircraft returned to Honolulu and landed without further incident.
The McDonnell Douglas DC-9 is an American five-abreast, single-aisle aircraft designed by the Douglas Aircraft Company. It was initially produced as the Douglas DC-9 prior to August 1967, after which point the company had merged with McDonnell Aircraft to become McDonnell Douglas. Following the introduction of its first jetliner, the high-capacity DC-8, in 1959, Douglas was interested in producing an aircraft suited to smaller routes. As early as 1958, design studies were conducted; approval for the DC-9, a smaller all-new jetliner, came on April 8, 1963. The DC-9-10 first flew on February 25, 1965, and gained its type certificate on November 23, to enter service with Delta Air Lines on December 8.
Frederick Daniel Applegate was director of product engineering for Convair, a McDonnell Douglas subcontractor supplying parts for the company's newest aircraft, the DC-10 trijet, during the early 1970s. He died on January 17, 1999, at age 81 in San Diego, California.
John Hixon Shaffer was an administrator of the Federal Aviation Administration from March 24, 1969 until March 14, 1973.
On December 3, 1990, two Northwest Airlines jetliners collided at Detroit Metropolitan Wayne County Airport. Flight 1482, a scheduled Douglas DC-9-14 operating from Detroit to Pittsburgh International Airport, taxied by mistake onto an active runway in dense fog and was hit by a departing Boeing 727 operating as Flight 299 to Memphis International Airport. One member of the crew and seven passengers of the DC-9 were killed.
Throughout a normal flight, a pilot controls an aircraft through the use of flight controls including maintaining straight and level flight, as well as turns, climbing, and descending. Some controls, such as a "yoke" or "stick" move and adjust the control surfaces which affects the aircraft's attitude in the three axes of pitch, roll, and yaw. Other controls include those for adjusting wing characteristics and those that control the power or thrust of the propulsion systems. The loss of primary control systems in any phase of flight is an emergency. Aircraft are not designed to be flown under such circumstances; however, some pilots faced with such an emergency have had limited success flying and landing aircraft with disabled controls.
United Airlines Flight 2885 was a scheduled cargo flight from Cleveland to Los Angeles, with stopover in Detroit. On January 11, 1983, a DC-8 operating as Flight 2885 crashed after take-off from Detroit, killing all three crew members. The National Transportation Safety Board (NTSB) investigation determined that the cause for the crash was pilot error. A radioactive package was found on board, but no radioactive material was spilled.
Emery Worldwide Airlines Flight 17 was a regularly scheduled United States domestic cargo flight, flying from Reno, Nevada to Dayton, Ohio with an intermediate stopover at Rancho Cordova, California. On February 16, 2000, the DC-8-71F operating the flight crashed onto an automobile salvage yard shortly after taking off from Sacramento Mather Airport, resulting in the deaths of all three crew members on board. The crew reported control problems during takeoff and attempted unsuccessfully to return to Mather airport.
Air Transport International Flight 805 was a regularly scheduled domestic cargo flight from Seattle to Toledo operated by Burlington Air Express. On February 15, 1992, the Douglas DC-8 operating the flight crashed during a second go-around attempt at Toledo Express Airport, killing all four people on board. The National Transportation Safety Board (NTSB) determined that the accident was caused by pilot error due to the aircraft's control not being maintained.
Evergreen International Airlines Flight 17 (4U17/EIA17) was a cargo flight operated by Evergreen International Airlines and flown by a McDonnell Douglas DC-9. On March 18, 1989, the flight's planned route was scheduled to take it from Kelly Air Force Base to Tinker Air Force Base, with a stop at Carswell Air Force Base in Fort Worth, Texas. The two pilots were the only occupants on board. Shortly after taking off from Carswell, the aircraft's main cargo door opened, the crew lost control of the aircraft and it subsequently crashed while attempting an emergency landing, killing both pilots.
This page is based on this Wikipedia article Text is available under the CC BY-SA 4.0 license; additional terms may apply. Images, videos and audio are available under their respective licenses.
