On 20 December 2008 a Boeing 737-500 being operated by Continental Airlines on a scheduled passenger flight from Denver to Houston departed the left side of runway 34R during a normal visibility night take-off roll in gusty crosswind conditions and then travelled across moderately rough but essentially level terrain before coming to stop still upright but with the fuselage broken into two pieces. A post crash fire followed. Six of the 115 occupants were seriously injured and a further 41 sustained minor injuries.
Ground track taken by the aircraft to its final resting position - taken from the official report
An Investigation was carried out by the National Transportation Safety Board (USA) (NTSB). It was established that the aircraft had left the runway at a speed of approximately 110 knots and that the total distance then travelled before stopping had been approximately 730 m, crossing both a taxiway and an airport service road and including a short airborne excursion following impact with uneven terrain. The cabin evacuation was found to have been promptly accomplished by the cabin crew with assistance from positioning operator flight crew. There were no announcements from the flight deck in connection with the evacuation. A fire developed on the right side of the aircraft but all occupants had been successfully evacuated before it breached the cabin.
It was established that there was no evidence of any defects in or failures of the engines, structures or systems of the aircraft, including the nosewheel steering system.
Huge amounts of recorded data on wind velocity across the airport at the time of the accident were available to the investigation, including that from 32 Low Level Wind Shear sensors from which information was also able to be displayed in the TWR.
It was confirmed that mountain wave conditions, which were widely known to commonly prevail at Denver, were extant at the time of the accident and had created strong westerly surface winds with very localised and intermittent gusts as high as 45 knots across the runway during the take-off roll. However, performance calculations made during the investigation indicated that the aircraft rudder was capable of producing enough aerodynamic force to offset the weather-vaning tendency created by even the strongest winds encountered during the accident take-off roll.
ATC were found to have cleared the aircraft for take off with a spot wind of 270° / 27 knots, which was equivalent to a cross wind component of 27 knots compared to the AFM limit of 33 knots. This was in keeping with prevailing ATC procedures which did not require the controller to provide additional information about variations in wind velocity. Use of the accident runway by other aircraft had not been followed by any adverse comment related to the gusting crosswinds which prevailed.
The conclusions of the investigation included the following:
- The Captain's use of tiller and full right control wheel in the 3 seconds before the excursion likely resulted from acute stress stemming from a sudden, unexpected threat, perceived lack of control, and extreme time pressure.
- The unexpectedly strong and gusty crosswinds the airplane encountered as it accelerated during the take-off roll made maintaining directional control during this take-off a more difficult control task than the captain was accustomed to dealing with; however, had the Captain immediately reapplied significant right rudder pedal input as the airplane was continuing its left turning motion, the airplane would not have departed the runway.
- The captain's initiation of a rejected take-off was delayed by about 2 to 4 seconds because he was occupied with the nosewheel steering tiller and right control wheel input, both of which were ineffective and inappropriate for steering the airplane.
- Although the departure wind information the Captain received with the take-off clearance from the Denver International Airport (DEN) air traffic control tower (ATCT) local controller indicated that the winds were out of 270° at 27 knots (which resulted in a stronger-than-expected 26.2-knot crosswind component), the reported winds did not exceed Continental's maximum crosswind guidance of 33 knots, and the captain could reasonably conclude that the winds, as reported by DEN ATCT, did not exceed either his or the airplane's crosswind capabilities.
- If the accident pilots had received the most adverse available wind information (which was displayed as airport wind on the Denver International Airport air traffic control tower local controller's ribbon display terminal and indicated a 35-knot crosswind with 40-knot gusts), the Captain would likely have decided to delay the departure or request a different runway because the resultant crosswind component exceeded Continental's 33-knot crosswind guidelines.
- The Denver International Airport air traffic control tower runway selection policy does not clearly account for crosswind components when selecting a runway configuration.
- Because Continental's simulator training did not replicate the ground-level disturbances and gusting crosswinds that often occur at or near the runway surface, and it is unlikely that the accident captain had previously encountered gusting surface crosswinds like those he encountered the night of the accident, the Captain was not adequately prepared to respond to the changes in heading encountered during this take-off.
- Because there are no standards for the development of enhanced crosswind guidelines for transport-category airplanes, Boeing did not adequately consider the dynamic handling qualities of the Boeing 737 during take-off or landing in strong and gusty crosswinds; it is likely that the enhanced crosswind guidelines developed by other manufacturers are similarly deficient.
- The accident pilots' injuries would have likely been lessened or eliminated if their seats had been designed to meet the crashworthiness requirements of 14 CFR 25.562, to which other airplane seats are designed.
- A flight attendant jump seat that is weakened due to undetected metal fatigue could fail under lower-than-expected crash loads and injure a cabin crewmember who might subsequently be needed to perform critical safety duties, such as evacuating passengers.
- The adhesive-only fastening method used for the latch plate in the aft galley of the accident airplane and similarly equipped airplane galleys was not adequate for securing galley drawers or other items of mass because it can fail over time and/or with exposure to the elements.
The Investigation concluded that the Probable Cause of the event was: “The Captain's cessation of right rudder input, which was needed to maintain directional control of the airplane, about 4 seconds before the excursion, when the airplane encountered a strong and gusty crosswind that exceeded the Captain's training and experience.” It was considered that the following factors had contributed to the occurrence:
- An air traffic control system that did not require or facilitate the dissemination of key, available wind information to the air traffic controllers and pilots
- Inadequate crosswind training in the airline industry due to deficient simulator wind gust modelling.
As a result of the Investigation, a total of 14 Safety Recommendations were made, all to the FAA: These Recommendations were to:
- Conduct research into and document the effects of mountain wave and downslope conditions at airports, such as Denver International Airport, that are located downwind of mountainous terrain (including, for example, airports in or near Colorado Springs, Colorado; Anchorage, Alaska; Salt Lake City, Utah; and Reno, Nevada), identify potential mountain-wave-related hazards to ground operations at those airports, and disseminate the results to pilots and airport air traffic control personnel to allow for more informed runway selection decisions.
- Archive all low-level windshear alert system (LLWAS) data obtained from Denver International Airport and other airports that experience similar wind conditions and make those data available for additional research and the potential future development of an improved LLWAS algorithm for crosswind and gusty wind alerts on air traffic control tower ribbon display terminals.
- Modify Federal Aviation Administration Order 7110.65 to require air traffic controllers at airports with multiple sources of wind information to provide pilots with the maximum wind component, including gusts, that the flight could encounter.
- Review the required documentation for all low-level windshear alert system (Low Level Wind Shear)-equipped air traffic control towers to ensure that a letter to airmen has been published and is easily accessible describing the location and designation of the remote sensors, the capabilities and limitations of the system, and the availability of current LLWAS remote sensor wind information on the request of a pilot, in compliance with Federal Aviation Administration Order 7210.3.
- Require air traffic control towers to locally develop and implement written runway selection programs that pro-actively consider current and developing wind conditions and include clearly defined crosswind components, including wind gusts, when considering operational advantage with respect to runway selection. (A-10-109) Gather data on surface winds at a sample of major U.S. airports (including Denver International Airport) when high wind conditions and significant gusts are present and use these data to develop realistic, gusty crosswind profiles for use in pilot simulator training programs.
- Require 14 Code of Federal Regulations Part 121, 135, and 91K operators to incorporate the realistic, gusty crosswind profiles developed as a result of Safety Recommendation A-10-110 into their pilot simulator training programs.
- Once realistic, gusty crosswind profiles as asked for in Safety Recommendation A-10-110 are developed, develop a standard methodology including pilot-in-the-loop testing, for transport-category airplane manufacturers to establish empirically based, type-specific maximum-gusting-crosswind limitations for transport-category airplanes that account for wind gusts.
- Once a methodology as asked for in Safety Recommendation A-10-112 has been developed, require manufacturers of transport-category airplanes to develop type-specific, maximum-crosswind take-off limitations that account for wind gusts.
- Until the actions described in Safety Recommendation A-10-113 are accomplished, require manufacturers of transport-category airplanes to provide operators with interim crosswind take-off guidelines that account for wind gusts.
- Work with U.S. airline operators to review and analyse operational flight data to identify factors that contribute to encounters with excessive winds and use this information to develop and implement additional strategies for reducing the likelihood of wind-related runway excursions.
- Require cockpit crew seats installed in newly manufactured airplanes that were type certificated before 1988 to meet the crashworthiness standards contained in 14 Code of Federal Regulations 25.562.
- Require operators to perform periodic inspections on the Burns Aerospace model 2501-5 jumpseats for fatigue cracks within the jumpseat structure and replace the jumpseat if fatigue cracks are found.
- Require that operators of transport-category airplanes that use galley latches or latch plates secured solely by adhesives that may degrade over time modify the latches to include mechanical fasteners.
The Final Report of the NTSB Investigation was adopted on 13 July 2010
Accidents and serious incidents which include Runway Excursion (Directional Control) as an outcome:
On 30 August 2018, a Boeing 747-400F making a crosswind landing at Hong Kong which was well within limits veered and rolled abnormally immediately after touchdown and runway impact damaged the two right side engines. The Investigation found that the flight was an experienced Captain’s line check handling sector and concluded that a succession of inappropriate control inputs made at and immediately after touchdown which caused the damage may have been a consequence of the Check Captain’s indication just before touchdown that he was expecting a landing using an alternative technique to the one he was familiar with.
On 23 October 2020, an Airbus A320 taking off from Brisbane became difficult to keep on the centreline as speed increased and takeoff was rejected from a low speed. It remained on the runway and messages indicating a malfunctioning right engine were then seen. The Investigation found that one engine had surged as thrust was applied due to damage caused by a screwdriver tip inadvertently left in the engine during routine maintenance and that the pilot flying had used the rudder when attempting to maintain directional control during the reject despite its known ineffectiveness for this purpose at low speeds.
On 31 December 2019, an Airbus A330-300 flew a night ILS approach to land on the 60 metre wide runway at Port Harcourt in undemanding weather conditions but became unstabilised just before touchdown when the handling pilot made unnecessary and opposite aileron and rudder inputs for which no explanation was found. Because of this, a late touchdown on the right hand edge of the runway was followed by the right main gear leaving the runway and travelling along the hard shoulder parallel to it for just over 1000 metres before regaining it which caused runway lighting and minor aircraft damage.
On 9 February 2020, a Boeing 737-800 rejected its takeoff from East Midlands from a speed above V1 after encountering windshear in limiting weather conditions and was brought to a stop with 600 metres of runway remaining. The Investigation found that the Captain had assigned the takeoff to his First Officer but had taken control after deciding that a rejected takeoff was appropriate even though unequivocal QRH guidance that high speed rejected takeoffs should not be made due to windshear existed. Boeing analysis found that successful outcomes during takeoff windshear events have historically been more likely when takeoff is continued.
On 19 August 2012, the crew of a Flybe Finland ATR 72-200 approaching Helsinki failed to respond appropriately to a fault which limited rudder travel and were then unable to maintain directional control after touchdown with a veer off the runway then following. It was concluded that as well as prioritising a continued approach over properly dealing with the annunciated caution, crew technical knowledge in respect of the fault encountered had been poor and related training inadequate. Deficiencies found in relevant aircraft manufacturer operating documentation were considered to have been a significant factor and Safety Recommendations were made accordingly.
On 29 August 2009, an Air Algérie Boeing B737-800 departed the side of the runway during take off but then regained the paved surface after sustaining damage from obstructions, completed the take off without further event and continued to destination. Damage to one of the engines, to tyres and to two lights was discovered at the destination. ATC remained unaware of the excursion until the Operator asked its representative at Lyon to ask the airport to carry out a runway inspection.
On 16 November 2012, an Air Contractors Airbus A300 departed the left the side of the landing runway at Bratislava after an abnormal response to directional control inputs. Investigation found that incorrect and undetected re-assembly of the nose gear torque links had led to the excursion and that absence of clear instructions in maintenance manuals, since rectified, had facilitated this. It was also considered that the absence of any regulation requiring equipment in the vicinity of the runway to be designed to minimise potential damage to aircraft departing the paved surface had contributed to the damage caused by the accident.
On 17 July 2007, the commander of a TAM Airlines Airbus A320 being operated with one thrust reverser locked out was unable to stop the aircraft leaving the landing runway at Congonhas at speed and it hit buildings and was destroyed by the impact and fire which followed killing all on board and others on the ground. The investigation attributed the accident to pilot failure to realise that the thrust lever of the engine with the locked out reverser was above idle, which by design then prevented both the deployment of ground spoilers and the activation of the pre-selected autobrake.
On 21 September 2012, an Aurela Boeing 737-300 lost directional control and left the paved surface when attempting to turn off the landing runway at Birmingham expeditiously to avoid the following aircraft having to go around. The Investigation noted that the range of the approaching aircraft - still 2.5nm as the incident aircraft began to clear the runway - had not been communicated and concluded that the speed of the aircraft had been inappropriate for the prevailing wet surface conditions as well as unnecessary to prevent a go around by the following aircraft.
On 23 June 2006, an AMC Airlines MD83 significantly overran the landing runway at Juba after a late touchdown followed by unexpected and un-commanded asymmetry in ground spoiler deployment and thrust reverser control caused by an unappreciated loss at some point en-route of all fluid from one of the two hydraulic systems. The Investigation concluded that the abnormal hydraulic system status should have been detectable prior to attempting a landing but also that one of the consequences of hydraulic system design should be modified.
On 16 July 2012, the left main landing gear of a Blue Islands ATR 42-300 collapsed during landing at Jersey. The aircraft stopped quickly on the runway as the left wing and propeller made ground contact. Although the crew saw no imminent danger once the aircraft had stopped, the passengers thought otherwise and perceived the need for an emergency evacuation which the sole cabin crew facilitated. The Investigation found that the fatigue failure of a side brace had initiated the gear collapse and that the origin of this was a casting discontinuity in a billet of aluminium produced to specification.
On 17 October 2011, the pilot of a Merpati DHC6 attempting to land at Dabra on a scheduled passenger flight lost control of the aircraft when several bounces were followed by the aircraft leaving the runway and hitting some banana trees before re entering the runway whereupon a ground loop was made near the end of the runway to prevent an overrun onto unfavourable terrain. The aircraft was damaged but none of the occupants were injured. The mis-managed landing was attributed to an unstabilised approach.
On 29 August 2011, an Airbus A320 which had up to that point made a stabilised auto ILS approach at destination deviated from the runway centreline below 200 feet aal but continued to a night touchdown which occurred on the edge of the 3400 metre runway and was followed by exit from the side onto soft ground before eventually coming to a stop adjacent to the runway about a third of the way along it. The subsequent investigation attributed the event to poor crew performance in reduced visibility
On 8 January 2010, an Air Berlin Boeing 737-800 attempted to commence a rolling take off at Nuremburg on a runway pre-advised as having only medium braking action. Whilst attempting to position the aircraft on the runway centreline, directional control was lost and the aircraft exited the paved surface onto soft ground at low speed before the flight crew were able to stop it. The event was attributed to the inappropriately high taxi speed onto the runway and subsequent attempt to conduct a rolling take off. Relevant Company standard operating procedures were found to be deficient.
On 16 January 2010, an Iran Air Airbus A300-600 veered off the left side of the runway after a left engine failure at low speed whilst taking off at Stockholm. The directional control difficulty was attributed partly to the lack of differential braking but also disclosed wider issues about directional control following sudden asymmetry at low speeds. The Investigation concluded that deficiencies in the type certification process had contributed to the loss of directional control. It was concluded that the engine malfunction was due to the initiation of an engine stall by damage caused by debris from a deficient repair.