Skip to content

Macondo Blowout and Explosion

Overview

On April 20, 2010, during temporary well-abandonment activities on the Deepwater Horizon drilling rig at the Macondo well, control of the well was lost and a blowout occurred. Hydrocarbons flowed past failed barriers, reached the rig, ignited, and caused explosions and fire. The incident killed 11 workers, injured 17, led to the sinking of the Deepwater Horizon, and caused marine and coastal damage from a large hydrocarbon release.

Incident Snapshot

Field Value
Facility / Company Deepwater Horizon / Macondo well; BP (operator/lease holder) and Transocean (drilling contractor)
Location Mississippi Canyon Block #252, Gulf of Mexico, approximately 50 miles southeast of Venice, Louisiana
Incident Date 2010-04-20
Investigation Status CSB investigation unanimously approved by the Board; final report issued in volumes and recommendation status changes later closed or otherwise resolved
Accident Type Oil and Refining - Fire and Explosion Investigation
Final Report Release Date 2016-04-20

What Happened

  • During temporary well-abandonment activities, BP and Transocean personnel misinterpreted a negative pressure test and believed the hydrocarbon-bearing zone had been sealed.
  • Drilling mud was removed from the well in preparation for a surface cement plug and hydrocarbons flowed past the failed cement barrier toward the rig.
  • The hydrocarbons continued to flow for almost an hour without human detection or activation of automated controls to close the BOP.
  • Oil and gas passed above the BOP and were forcefully released onto the rig.
  • The well operations crew manually closed the BOP, but hydrocarbons already on the rig continued to gush and ignited.
  • Explosions and fire occurred on the Deepwater Horizon.
  • The AMF/deadman emergency system was activated, but the blind shear ram did not fully close and seal the well.
  • The Deepwater Horizon later sank.

Facility and Process Context

  • temporary well-abandonment activities
  • deepwater drilling and completions
  • negative pressure test
  • cement barrier installation
  • displacement of drilling mud with seawater
  • blowout preventer (BOP) emergency response
  • diverter system and mud gas separator (MGS)
  • major accident prevention and safety critical elements
  • offshore oil and gas operations

Consequences

  • Fatalities: 11
  • Injuries: 17
  • Environmental release: massive marine and coastal damage from approximately 4 million barrels of released hydrocarbons
  • Facility damage: sinking of the Deepwater Horizon; explosion and fire on the rig
  • Operational impact: evacuation of 115 individuals from the rig; loss of well control and prolonged uncontrolled release

Key Findings

Immediate Causes

  • Control of the well was lost, resulting in a blowout.
  • The critical cement barrier intended to keep hydrocarbons below the seafloor had not been effectively installed at the bottom of the well.
  • BP and Transocean personnel misinterpreted the negative pressure test and erroneously believed the well had been sealed.
  • Hydrocarbons found an ignition source on the rig and ignited.
  • The blind shear ram did not fully close and seal the well because the drillpipe buckled off-center in the BOP.

Contributing Factors

  • Removing drilling mud after the test allowed hydrocarbons to flow past the failed cement barrier.
  • The hydrocarbons continued to flow for almost an hour without human detection or activation of automated controls to close the BOP.
  • The diverter system on the Deepwater Horizon was preset to route well fluids to the mud gas separator rather than overboard.
  • The mud gas separator was not designed to handle a blowout or gas-in-riser event and was overwhelmed.
  • The ability of the BOP to act as a barrier was contingent primarily upon human detection of the kick and timely activation and closure of the BOP.
  • The blue pod was miswired, causing a critical battery to drain and rendering the pod inoperable.
  • A critical solenoid valve in the yellow pod was miswired.
  • No effective testing or monitoring was in place to verify the availability of the redundant systems in the AMF/deadman.
  • Routine inspection and weekly function testing of operational BOP components were insufficient to identify latent failures of the emergency systems.
  • The BSR did not meet the manufacturer’s published design shearing capabilities for the drillpipe used during most of the DWH drilling operations.
  • The crew relied on a negative pressure test that was misinterpreted as successful.
  • The crew did not detect hydrocarbons flowing into the well and up the riser in time to prevent escalation.
  • The mud gas separator was overwhelmed when the diverter was activated.
  • The crew did not successfully complete the multi-step process necessary to reroute well fluids overboard.

Organizational and Systemic Factors

  • The lack of incorporation of human factors considerations into planning and execution of temporary abandonment increased the likelihood of the blowout.
  • BP’s development of the temporary abandonment plan occurred without a formal process and lacked assessment of decisions and quality control.
  • BP sent a final written Forward Plan without mention of the negative pressure test.
  • Transocean did not enforce its own policy to use written Standing Instructions to the Driller.
  • Transocean did not meaningfully engage the workforce in managing risks through identifying effective barriers.
  • BP and Transocean did not effectively bridge the gap between work-as-imagined and work-as-done.
  • BP did not apply its Major Accident Risk Process or perform an MAR study with the Deepwater Horizon or other contracted rigs.
  • BP did not apply OMS retroactively at Macondo and did not amend the contract to ensure drilling activities supported OMS.
  • The bridging document was only envisioned for personal safety issues and did not address process safety items.
  • Both BP and Transocean emphasized personal safety metrics rather than process safety performance.
  • The SEMS Rule does not directly apply to contractors and does not require demonstrated risk reduction to an ALARP level.
  • The SEMS Rule lacks specific language focusing the responsible party on identification and management of all safety critical elements.
  • The offshore regulatory framework did not adequately place the onus on industry to reduce risk or empower the regulator to proactively ensure effective management of major hazards.
  • BSEE did not require documentation demonstrating control of major hazards before hazardous offshore operations.
  • BSEE did not have SEMS performance indicators and relied heavily on lagging indicators and third-party audits.
  • The offshore safety regulator lacked sufficient staffing, resources, and technical expertise to provide proactive oversight.

Failed Safeguards or Barrier Breakdowns

  • critical cement barrier
  • negative pressure test
  • blowout preventer (BOP)
  • upper annular preventer
  • blind shear ram (BSR)
  • AMF/deadman system
  • blue pod
  • yellow pod solenoid valve
  • diverter system
  • mud gas separator (MGS)
  • routine inspection and weekly function testing of BOP emergency systems
  • independent functional testing of redundant AMF/deadman subsystems
  • documentation and verification of safety critical elements
  • process safety indicators

Recommendations

  1. CSB-2010-10-I-OS-R1 — Recipient: Bureau of Safety and Environmental Enforcement, United States Department of Interior — Status: Closed – Acceptable Alternative Action — Augment 30 C.F.R. § 250 Subpart S to require responsible parties, including lessee, operator, and drilling contractor, to effectively manage all safety critical elements and reduce major accident risk to ALARP, including written identification of SCEs, documented performance standards, continuous active assurance, and independent verification.
  2. CSB-2010-10-I-OS-R2 — Recipient: Bureau of Safety and Environmental Enforcement — Status: Closed – Acceptable Alternative Action — Publish safety guidance to assist responsible parties in fulfilling R1 for identification and effective management of safety critical elements with the goal of reducing major accident risk to ALARP.
  3. CSB-2010-10-I-OS-R3 — Recipient: American Petroleum Institute — Status: Closed – Acceptable Alternative Action — Publish an offshore exploration and production safety standard for the identification and effective management of safety critical elements with the goal of reducing major accident risk to ALARP.
  4. CSB-2010-10-I-OS-R4 — Recipient: American Petroleum Institute — Status: Closed – Acceptable Action — Revise API Standard 53 to establish additional testing or monitoring requirements that verify the reliability of individual redundant blowout prevention systems separate from integrated system tests.
  5. CSB2010-10-I-OS-R5 — Recipient: American Petroleum Institute — Status: Open – Acceptable Response or Alternative Response — Revise API Recommended Practice 75 to require a specific focus on major accident prevention, including human factors, corporate governance, leading and lagging indicators, ALARP, hierarchy of controls, contractor oversight, and expanded roles and responsibilities.
  6. CSB2010-10-I-OS-R6 — Recipient: Bureau of Safety and Environmental Enforcement — Status: Closed – Reconsidered / Superseded — Develop guidance to assist industry in incorporating human factors principles into the systematic analysis of major accident hazards, SEMS programs, and major hazards report documentation.
  7. CSB2010-10-I-OS-R7 — Recipient: Bureau of Safety and Environmental Enforcement — Status: Closed – Unacceptable Action/No Response Received — Develop guidance addressing the roles and responsibilities of corporate board of directors and executives for effective major accident prevention.
  8. CSB2010-10-I-OS-R8 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed—Acceptable Action — Expand the BSEE Safety Culture policy and establish a process safety culture improvement program with periodic assessments and major accident prevention improvements.
  9. CSB2010-10-I-OS-R9 — Recipient: Sustainability Accounting Standards Board (SASB) — Status: Closed – Acceptable Alternative Action — Update and strengthen the Oil & Gas Exploration & Production Sustainability Accounting Standard to expand disclosure of leading and lagging indicators and emphasize process safety barriers and management systems.
  10. CSB2010-10-I-OS-R10 — Recipient: Ocean Energy Safety Institute (OESI) — Status: Closed—Acceptable Action — Conduct further study on riser gas unloading scenarios, testing, and modeling and publish technical guidance for industry safety improvements.
  11. CSB2010-10-I-OS-R11 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed – Acceptable Alternative Action — Revise and augment offshore safety regulations, including SEMS, to establish clear safety and environmental management responsibilities, require ALARP-based documentation, use of hierarchy of controls, identification of safety critical elements and tasks, and documented verification throughout the lifecycle of operations.
  12. CSB2010-10-I-OS-R12 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed – Acceptable Alternative Action — Augment BSEE capabilities to review major hazards documentation and conduct preventive, comprehensive inspections and audits with technically qualified staff.
  13. CSB2010-10-I-OS-R13 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed – Acceptable Alternative Action — Enhance the qualifications, professional competency, and diversity of BSEE staff, including technical, human factors, and process safety expertise.
  14. CSB2010-10-I-OS-R14 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed—Acceptable Alternative Action — Expand the offshore safety regulatory reporting program to collect, track, and analyze safety performance indicators, emphasize leading indicators, set annual process safety goals, and use data to guide inspections and resource allocation.
  15. CSB2010-10-I-OS-R15 — Recipient: Department of the Interior - Bureau of Safety and Environmental Enforcement — Status: Closed – Reconsidered/Superseded — Issue participation regulations and training requirements for workers and their representatives, including worker-elected safety representatives and committees, enforceable stop-work authority, tripartite forums, and protections against retaliation.

Key Engineering Lessons

  • A BOP can only function as a barrier if it can be closed; emergency systems must be verified to work on demand.
  • Redundant emergency systems should be independently testable; integrated tests can mask latent failures in individual components.
  • Human factors must be considered in the design of critical control systems, including wiring, labeling, and error-proofing.
  • Safety critical elements require lifecycle management, including identification, performance standards, assurance, verification, and corrective action.
  • Negative pressure tests and other safety-critical field tests need clear acceptance criteria and procedures that prevent misinterpretation.
  • Diverter systems and mud gas separators must not be assumed capable of handling blowout-scale flows.
  • Process safety performance must be monitored with leading indicators tied to barrier health, not only lagging personal safety metrics.
  • Major accident prevention depends on formal risk assessment, not informal workarounds or assumptions that one barrier makes others unnecessary.

Source Notes

  • Priority 1 final report findings were used to resolve incident causation and consequences where conflicts existed.
  • Priority 3 recommendation status documents were used to update recommendation status and wording where available.
  • Priority 4 supporting documents were used only to supplement context and lessons where consistent with higher-priority sources.
  • No external facts were added beyond the provided extracts.

Similar Incidents

Incidents sharing the same equipment, root causes, or hazard types.

Same Equipment

Same Root Cause

Same Hazard

← View in Knowledge Graph