major accidents in process industries

Upload: acacioborba

Post on 11-Oct-2015

234 views

Category:

Documents


2 download

TRANSCRIPT

  • Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    www.elsevier.com/locate/jlp

    Major accidents in process industries and an analysis of causes andconsequences

    Faisal I. Khan, S.A. Abbasi *

    Computer Aided Environmental Management Unit, Centre for Pollution Control and Energy Technology, Pondicherry University, Kalapet,

    Pondicherry-605 014, India

    Abstract

    This paper briefly recapitulates some of the major accidents in chemical process industries which occurred during 19261997.These case studies have been analysed with a view to understand the damage potential of various types of accidents, and thecommon causes or errors which have led to disasters. An analysis of different types of accidental events such as fire, explosion

    and toxic release has also been done to assess the damage potential of such events. It is revealed that vapour cloud explosion(VCE) poses the greatest risk of damage. The study highlights the need for risk assessment in chemical process industries. 1999Elsevier Science Ltd. All rights reserved.

    Keywords: Industrial hazards; Risk assessment; Explosions; Fires

    1. Introduction

    To understand the mechanisms of accidents and todevelop accident prevention and control strategies, it isessential to know about and learn from past accidents.However, industries are generally reluctant in revealingwhat had happened and have a tendency to underplaytheir mistakes. This aspect has been discussed byBadoux (1983); Marshall (1987); Kletz (1989); Lees(1996). Unfortunately the negative attitude of the indus-tries to cover up the truth has caused an increase in thefrequency of accidents. Among these accidents many aredue to the repetition of the same/similar faults (Kletz,1991a, b). Not only for industrial accidents but even foraccidents occurring during transportation there is alwayssomeone with an interest in suppressing the facts.In India a study funded by the International Labour

    Office pertaining to identification of major accident haz-ards and the development of a control system was con-ducted (Gupta, 1990), which revealed a total of 586major accident hazard (MAH) units and 75 hazardouschemicals. The distribution of MAH units and hazardouschemicals across various states of India is presented in

    * Corresponding author. E-mail: [email protected]

    09504230/99/$ - see front matter 1999 Elsevier Science Ltd. All rights reserved.PII: S0950-4230 (98)00062-X

    Table 1 (Raghavan & Swaminathan, 1996). It is seenthat the states of Gujarat and Maharashtra have the lar-gest number of MAH units and also handle the largestnumber of hazardous chemicals. No wonder, then, thatthe maximum number of accidents in the past occurredin these two regions.

    2. Definition of accidents

    According to Suchman (1961), an event can be classi-fied as an accident if it is unexpected, unavoidable andunintended. He has proposed the following three charac-teristics with which to classify an event as an accident:(1) degree of expectedness, (2) degree of avoidabilityand (3) degree of intention.Secondary characteristics are: (1) degree of warning,

    (2) duration of occurrence, (3) degree of negligence and(4) degree of misjudgement. An event is an accident ifit gives little warning, happens quickly, or if there is alarge element of negligence and misjudgement leadingto it.Suchman has added that as knowledge increases an

    event is more likely to be described in terms of its causalfactors and less likely as an accident.

  • 362 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 1

    State-wise distribution of major hazardous units (MAH) and hazard-

    ous substances

    State MAH units Hazardous substances

    Andhra Pradesh 35 24

    Bihar 12 11

    Delhi 19 8

    Goa 8 9

    Gujarat 112 32

    Karnataka 26 14

    Kerala 19 19

    Maharashtra 97 24

    Madhya Pradesh 33 10

    Tamil Nadu 41 31

    Uttar Pradesh 40 14

    West Bengal 40 23

    Assam 7 10

    Haryana 7 4

    Jammu Kashmir 7 4

    Nagaland 1 1

    Orissa 13 10

    Pondicherry 3 3

    Punjab 12 6

    Rajashthan 54 17

    Total number of MAH factories, 586.

    Total number of hazardous substances, 75.

    2.1. Modelling of accident process

    It is helpful to model the accident process in order tounderstand more clearly the factors which contribute toaccidents and the steps which can be taken to avoidthem. One type of model, discussed by Houston (1971),is the classical one developed by lawyers and insurerswhich focuses attention on the proximate cause. It isrecognised that many factors contribute to an accident,but for practical, and particularly for legal, purposes aprincipal cause is identified. This approach has a numberof defects: there is no objective criterion for dis-tinguishing the principal cause, the relationships betweencauses are not explained, and there is no way of knowingif the cause list is complete.Another type of model is the fault tree model. A sim-

    ple fault tree model of an accident is presented in Fig.1. The initiating event which constitutes a potential acci-dent occurs only if some enabling event occurs, or hasalready occurred. This part of the tree is termed ademand tree, since it puts a demand on the protectivefeatures. The potential accident is realised only if pre-vention by protective equipment and human action fails.An accident occurs which develops into a more severeaccident only if mitigation fails. A similar model basedon fault tree has been proposed by Wells, Phang, Ward-man and Whetton (1992).Another approach to model accidents is that taken by

    Kletz (1988), who has developed a model orientedtoward accident investigation. The model is based essen-

    Fig. 1. Fault tree accident model.

    tially on the sequence of decisions and actions whichlead up to an accident, and shows against each step therecommendations arising from the investigation (Fig. 2).A model which emphasises the broader, socio-techni-

    cal background to accidents has been developed byGeyer and Bellamy (1991) as shown in Fig. 3. It presentsa generic model and the application of the model toan incident.

    3. Major process hazards

    The major hazards with which the chemical industryis concerned are fire, explosion and toxic release. Ofthese three, fire is the most common but explosion ismore significant in terms of its damage potential, oftenleading to fatalities and damage to property. Toxicrelease has perhaps the greatest potential to kill a large

  • 363F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Fig. 2. Kletz accident model.

    number of people and cause an area to be toxified forseveral months to several years. Large toxic releases arerare but, as the Bhopal tragedy indicates, may have veryhigh death tolls.Often no distinction is made between fire and

    explosion losses. The latter are normally included in theoverall fire statistics. In fact, it is explosions which causethe most serious losses (Doyle, 1969, 1981; Norstrom,1982; Davenport, 1988; Carson and Mumford, 1988). Asmuch as two-thirds of the losses arising from an accidentoccurring in chemical process industries are attributableto explosions (Health and Safety Executive, 1988; Lees,1996). Over three-quarters of the explosion involve com-bustion or explosive materials. Norstrom (1982) ana-lysed fire-based and explosion-based accidents separ-ately (Tables 2 and 3). It is evident that about 18% offires are due to release and overflow of flammable gasesand/or liquids. Fires contributed about 20% to the totalloss. In comparison, explosions contributed about 75%to the total loss. Failure of proper reaction controlsseems to be the most frequent cause leading to accidents.It contributed 35% to the total number of accidents. Theprocessing area is the most susceptible location of theaccident.Marshall (1977); Bellamy, Geyer and Astley (1989)

    have reported data for various release accidents (Table4) in which the incidents are ranked in terms of the

    Fig. 3. Gayer and Bellamy model of the accident process (Geyer &

    Bellamy, 1991).

    Table 2

    Main causes of large fires in the chemical and allied industries

    (Norstrom, 1982)

    Causes Proportion

    (%)

    Flammable liquid or gas (release, overflow) 17.8

    Overheating, hot surfaces, etc. 15.6

    Pipe or fitting failure 11.1

    Electrical breakdown 11.1

    Cutting and welding 11.1

    Arson 4.4

    Others 28.7

  • 364 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 3

    Information related to explosion in the chemical and allied industries

    (Lees, 1996)

    Proportion

    (%)

    Main cause

    Chemical reaction uncontrolled 20.0

    Chemical reaction accidental 15.0

    Combustion explosion in equipment 13.3

    Unconfined vapour cloud 10.0

    Overpressure 8.3

    Decomposition 5.0

    Combustion sparks 5.0

    Pressure vessel failure 3.3

    Improper operation 3.3

    Others 16.8

    Frequent location of occurrence

    Enclosed process or manufacturing buildings 46.7

    Outdoor structures 31.7

    Yard 6.7

    Tank farm 3.3

    Boiler house 3.3

    Others 8.3

    Various contributing factors

    Rupture of equipment 26.7

    Human element 18.3

    Improper procedures 18.3

    Faulty design 11.7

    Vapour-laden atmosphere 11.7

    Congestion 11.7

    Flammable liquids 8.3

    Long replacement time 6.7

    Inadequate combustion controls 5.0

    Inadequate explosion relief 5.0

    amount of vapour released. Their reports suggest thatlarge releases often result in explosions rather than fires.The problem of avoiding major hazards is essentially

    that of avoiding loss of containment. This includes notonly preventing an escape of materials from leaks etc.,but also avoidance of an explosion inside the plant ves-sels and pipe work. Some factors which determine thescale of the hazard are:

    1. the inventory;2. the energy factor;3. the time factor;4. the intensitydistance relations;5. the exposure factor;6. the intensitydamage and intensityinjury relation-

    ships.

    Data related to major injuries (including fatality) inchemical and allied industries have been plotted in Fig.4. It is evident from the data that, in the chemical indus-tries, the rate of fatal injuries is less than in mineral oilprocessing industries (refineries, etc.). But during the last

    Table 4

    Characteristics of accidental release from pipework and in-line equip-

    ment (Bellamy et al., 1989; Lees, 1996).

    No. of incidents

    Location type

    Chemical plant 278

    Refinery 96

    Factory 187

    Storage depot 47

    Tank yard 28

    Fuel station 15

    Other 38

    Unknown 232

    Total 921

    Site status

    Normal operations 343

    Storage 103

    Loading/unloading 33

    Maintenance 146

    Modification 8

    Contractor work 18

    Testing 5

    Unknown 128

    Other 40

    Start-up 42

    Shut-down 18

    Total 884

    Materials released

    Ammonia 54

    Hydrocarbons (unspecified) 54

    Chlorine 50

    Hydrogen 37

    Benzene 33

    Crude oil 28

    Steam 25

    Natural gas 24

    Propane 20

    Butane 18

    Fuel oil 18

    Hydrochoric acid 16

    Sulphuric acid 16

    Ethylene 16

    Hydrogen sulphide 14

    Water 13

    Nitrogen 13

    Oxygen 13

    Vinyl chloride 12

    LEG 12

    Styrene 11

    Naphtha petroleum 10

    Total 507

    Material phase

    Liquid 393

    Gas 260

    Vapour 13

    Solid 9

    Liquid 1 gas/vapour 120

    Solid 1 gas/vapour 3

    Total 798

  • 365F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 4

    Continued.

    No. of incidents

    Unignited material dispersion

    Flammable 127

    Toxic 123

    Flammable/toxic 47

    Corrosive 97

    Irritant 1

    Unignited gas 96

    Vapour cloud 180

    Liquid 212

    Spill 186

    Jet/spurt 8

    Spray 10

    Total 1087

    Fire or explosion event

    Fire 145

    Flash fire 11

    Pool fire 4

    Jet fire 1

    Fireball 7

    BLEVEa 4

    Explosion 63

    Explosion followed by fire 77

    Explosion followed by flash fire 2

    Total 314

    aBoiling liquid expanding vapour explosion.

    Fig. 4. Incidence rates of fatal and major injuries in chemical and

    mineral oil processing industries (19811990).

    few years the rates seem to have come close to eachother for the two types of industries.

    3.1. General causes of accident

    After an accident, various analysts and pressuregroups formulate different theories of the possiblecauses. There are almost as many different diagnoses asthere are investigators. Unfortunately, there is no accept-

    ance, or consistent causeeffect diagnostic system, so itis often difficult to reconcile different analyses.

    3.2. Reporting of incidents and databases

    According to Lees (1980, 1994, 1996), the extent andthe accuracy of the reporting of incidents and injuriesare variable and this creates problems, particularly forattempts to perform statistical analysis of the data.For example, past incidents in the USA, the UK, and

    some of the EU (European Union) countries have gener-ally been reported in detail and analysed critically butcomparable incidents in the erstwhile USSR, China andBalkan states have received much less publicity andassessment.The problem has been discussed by Badoux (1983).

    Fig. 5 shows schematically the probable extent of under-reporting, curve A representing the actual reporting situ-ation and curve B the ideal one (Lees, 1996).There are a number of databases specifically dealing

    with case histories. They include the following.

    I Major Hazards Incident Data System (MHIDAS) andthe corresponding explosives data system EIDAS.These are operated by SRD (Safety and ReliabilityDirectorate, UK Atomic Energy Authority).

    I The FACTS incident database.I The Major Accident Reporting System (MARS),described by Drogaris (1991, 1993).

    I The FIRE incident database for chemical warehousefires, described by Koivisto and Nielsen (1994).

    I The offshore Hydrocarbon Release (HCR) databasedescribed by Bruce (1994).

    In this paper a study of industrial accidents has beenconducted with a view to identify the factors which leadto accidents and the lessons for loss prevention to belearnt from these accidents. This study may be helpful

    Fig. 5. Under-reporting of accident (Lees, 1996).

  • 366 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    in developing newer know-how for process safety andaccident damage control.

    3.3. Classification of accidents

    Accidents involving hazardous chemicals can bebroadly categorised into two major groups: fixed instal-lation accidents and transportation accidents. The fixedinstallation accidents consider all accidents occurring inindustries during different stages of operation, whiletransportation accidents consider accidents occurringduring transportation, loading or unloading of chemicals.The transportation accidents can be further categorisedaccording to the different mode of transportation.A search of the literature covering the time span 1926

    through to 1997 revealed reports of 3222 accidents relat-ing to handling/transportation/processing/storage ofchemicals (Nash, 1976; Lewis, 1984, 1993; Marshall,1987; Hasstrup & Brochoff, 1990; Chowdhury & Park-inson, 1992; Taylor, 1993; Thomas, 1995; Lees, 1996;Khan & Abbasi, 1996, 1997). The actual number maybe high as reports of all accidents are not available in theprimary literature. Moreover, we have considered hereaccidents involving the loss of more than $1 millionand/or fatalities.Of the 3222 accidents, 54% are fixed installation acci-

    dents, 41% are transportation accidents and 5% miscel-laneous accidents (Fig. 6). The 1320 transportation acci-dents can be further classified according to the differentmodes of transportation. Such classification (Fig. 7) indi-cates that 37% occurred during rail transport, 29% dur-ing road transport, 6% during marine transport, 18% dur-ing pipeline transport, 4% during inland waterwaytransport, and the remaining during loading andunloading of chemicals. Whether pipelines should beconsidered as fixed installations or a means of transpor-

    Fig. 6. Accident classification.

    Fig. 7. Accident cases concerning transportation.

    tation is a matter of some controversy. We feel that theportion of the pipeline which falls within the confinesof the industry should be treated as a fixed installationand the portion outside the industrial periphery as atransport vehicle.Of the different means of transportation, rail has

    higher damage potential as larger quantities are trans-ported by this means. However, if we consider the dam-age it may cause to life and property, transport by roadis more hazardous, as roads often pass through populatedareas, especially in developing countries (Khan &Abbasi, 1995).Pipeline transportation is comparatively safer, pro-

    vided that the speed and conditions of transportation(temperature, phase, and pressure) as well as the routeof the pipeline are carefully managed. A summary of theworst transport disasters are presented in Table 5.

    4. Fixed installation accidents

    Our survey reveals that 1744 significant accidentshave occurred during the period 19281997. A study ofmajor factors (vessels, chemicals, process conditions)leading to accidents is summarised in Table 6. It revealsthat chemical process plants are most prone to accidents.Ammonia is the chemical most often involved. Of the1744 accidents (up to November 1997), 441 (25%) haveinvolved fires and explosions, and 1247 (71%) haveinvolved toxic release. The remaining accidents (4%)featured a combination of fire, explosion and toxicrelease. In terms of harmful consequences, toxic releasecovers wider areas than fires/explosions. Also if the tox-icity of the released chemical is high, as was the casewith the MIC (methyl iso-cynate) leak during the Bhopaldisaster, the damage may be very severe.The destructive impact of an explosion generally

    covers a wider area than the region-of-impact of a fire.

  • 367F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 5

    The most gruesome transportation accidents dealing with hazardous chemicals

    Year Location Chemical Incident Fatality/injury

    Pipeline transport

    1981 S. Raface, Venezuela LPG Explosion 18/35

    1984 Cubato, Brazil Gasoline Fire and explosion 508/31

    1984 Ghari Dhoda, Pakistan LNG Explosion 60/11

    1988 Mexico City, Mexico Crude oil Fire and explosion 12/80

    1989 Nizhnevartovsk, Russia LPG Explosion and fire 462/290

    Road transport

    1975 Texas, USA LPG Explosion 16/35

    1978 Los Afaques, Spain Propylene Explosion and fire 216/400

    1978 Xilotopee, Mexico Butane Explosion 100/200

    1987 Preston, UK Diesel oil Fire 12/16

    1988 Karo, Nigeria Petrol Explosion and fire 15/35

    1995 Madras, India Benzene Explosion and fire 115/10

    Rail transport

    1974 Decatur, USA Isobutane Explosion 7/152

    1978 Tennessee, USA Propane Explosion 25/50

    1981 Potosi, Mexico Chlorine Toxic release 29/1000

    1983 Pojuca, Brazil Gasoline Fire 10/40

    1983 Dhurabai, India Kerosine Explosion 47/15

    1988 Arzanas, Russia Explosive Explosion 73/230

    Table 6

    Major factors leading to accident in the chemical industries (Lees,

    1996)

    No. of times Proportion

    (%)

    Equipment failure 223 29.2

    Operational failure 160 20.9

    Inadequate material evaluation 120 15.7

    Chemical process problems 83 10.9

    Material movement problems 69 9.0

    Ineffective loss prevention program 47 6.2

    Plant site problems 27 3.5

    Inadequate plant layout 18 2.4

    Structures not in conformity with use 17 2.2

    requirement

    Secondly, except in certain cases when ambient con-ditions conspire to enable very rapid spread of a fire,most fires take time to consolidate. If emergency pre-paredness measures are in place, this time proves crucialin enabling control of the fire. On the other hand, whenan explosion takes place it does so instantly, giving notime for escape.In a very large number of situations, explosions in

    chemical process industries are either caused by fire, orlead to a fire. A summary of major catastrophic accidentsfor the period 19281997 is presented in Tables 79.This information was collected by various literaturesources (Nash, 1976; Gugan, 1979; Amesz, Francocci,Primavera & Van der Pas, 1983; Lees, 1980, 1994, 1996;

    Marshall, 1977, 1987; Kletz, 1988, 1991a; Lees & Ang,1984; Kharbanda & Stallworthy, 1988; Hasstrup & Bro-choff, 1990; Palmer, 1983; Prugh, 1991; Amendola,Contini & Nichele, 1988; TPL, 1992; Khan & Abbasi,1996, 1997; Koivisto, Vaija & Dohnal, 1989; Koivisto &Nielsen, 1994; Chemical Industrial Digest, 1995; LossPrevention bulletins, 1980, 1981, 1982, 1983, 1984,1986).The worst ever accident in the chemical process indus-

    tries involving toxic release occurred at Bhopal in 1984.The worst ever fire-cum-explosion accident (on shore)occurred in Mexico in the same year. The worst everoff-shore accident occurred on Piper Alpha in 1988.

    5. Case studies

    We present below brief case-histories of typical acci-dents.

    5.1. Accidents in refineries

    At a refinery in France, a spillage occurred on 4 Janu-ary 1966 when an operator was draining water from a1200 m pressurised propane sphere. The propane vapourspread over a radius of 150 m and was ignited by a caron the road. The pool of propane below the sphereengulfed the vessel in flames. The resultant boiling-liquid-expanding-vapour explosion (BLEVE) killed thefireman and 17 others. The conflagration took 48 hoursto control and caused extensive damage to the refinery.

  • 368 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 7

    List of major accidents in chemical process industries, 19261969

    Year Location Chemical Event Deaths/injured

    1926 St. Auban, France Chlorine Toxic release 19/105

    1928 Homburg, Germany Phosgene Toxic release 10/50

    1929 Syracause, New York Chlorine Toxic release 1/100

    1939 Zarnesti, Romania Chlorine Toxic release 60/?

    1940 Mjodelana, Norway Chlorine Toxic release 3/34

    1942 Tessenderloo, Belgium Ammonium nitrate Explosion > 100

    1943 Ludigshafen, Germany Butadiene Explosion 57/37

    1943 Los Angeles, CA Butane Fire 5/ > 25

    1944 Cleveland, OH LNG Fire and explosion 128/300

    1944 Denison, TX Butane Fire 10/45

    1947 Brest, France Ammonium nitrate Explosion 21/?

    1947 Rauma, Finland Chlorine Toxic release 19/200

    1947 Texas City, TX Ammonium nitrate Explosion 552/3000

    1948 Ludigshafen, Germany Dimethyl ether Explosion 245/2500

    1949 Perth, NJ Hydrocarbons Fire 4/26

    1950 Poza Rica, Mexico Hydrogen sulphide Toxic release 22/320

    1952 Walsum, Germany Chlorine Toxic release 7/56

    1954 Bitburg, Germany Kerosine Fire 32/16

    1955 Whiting, IN Naptha Explosion 2/30

    1958 Niagara Falls, NY Nitromethane Explosion ?/ > 200i

    1958 Signal Hills, CA Oil forth Fire 2/34

    1959 Meldrin, GA LPG Explosion 23/78

    1959 Kansas City, MO Gasoline Fire 5/?

    1959 Phillipsburg, NJ Seal oil Explosion 6/6

    1959 Roseberg, OR Ammonium nitrate Explosion 13/74

    1959 Ube, Japan Ammonia plant Explosion 11/40

    1960 Forepart, TX Allyl chloride Explosion 6/14

    1960 Kingsport, TN Aniline plant Explosion 15/55

    1961 La Barre, LA Chlorine Toxic release 1/114

    1962 Doe Run, Key Ethylene oxide Explosion 2/19

    1962 New Belin, NY LPG Explosion 10/75

    1962 Ras Taruna, Saudi Arabia Propane Fire 1/111

    1962 Toledo Acrylic polyamide Explosion 10/46

    1964 Mebronville, MA PVC Explosion 7/27

    1964 Texas, USA Ethylene Explosion 2/34

    1965 Louisville, KY Mono. acetylene Explosion 12/60

    1965 Natchitoches, LA Natural gas Explosion 17/56

    1966 Freyzin, France Propane Fire and explosion 18/83

    1966 Larsoe, LA NGL Fire 7/20

    1966 LaSallie, Quebec Styrene Explosion 11/10

    1966 West Germany Methane Explosion 3/83

    1967 Antwerp, Belgium VCM Explosion 4/33

    1967 Hawthorn, NJ ? Explosion 2/16

    1967 Lake Charles, LA Isobutane Explosion 7/14

    1968 East Germany VCM Explosion 24

    1968 Hull, UK Acetic acid Explosion 2/13

    1968 Lievin, France Ammonia Toxic release 5/35

    1968 Pernis, Netherlands Oil (compr.) Explosion 2/85

    1969 Basel, Switzerland Nitro liquid Explosion 3/28

    1969 Repcelak, Hungary Carbon dioxide Explosion 9/23

    1969 Crete, NB Ammonia Toxic release 8/20

    1969 Escombreaes Petroleum Explosion 4/3

    1969 Laurel, MS LPG Explosion 2/976

    1969 Puerto la Cruz Light hydro. Explosion 5/23

    1969 Teeside, UK Cyclohexane Fire 2/23

    ?, information not available.

  • 369F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 8

    List of major accidents in chemical process industries, 19701979

    Year Location Chemical Event Deaths/injured

    1970 Philadelphia, Panama Catl. cracker Explosion 7/42

    1971 Emmerich, Germany Ammonia Toxic release 4/53

    1971 Houston, TX VCM Explosion 1/50

    1971 Longview, TX Ethylene Explosion 4/60

    1971 Netherlands Butadiene Explosion 8/21

    1972 Rio de Janerio, Brazil Butane Explosion 37/53

    1972 Lynchburg, VA Propane Fire 2/3

    1972 Netherlands Hydrogen Explosion 4/40

    1972 Weirton, WV Coke plant Explosion 10/10

    1972 West Virginia, USA Gas Explosion 21/20

    1973 Kingman, AZ Propane Fire 13/89

    1973 Austin, TX NGL Fire 6/21

    1973 Japan VCM Explosion 1/16

    1973 Potchefstroom Ammonia Toxic release 18/34

    1973 St. Amand LEaux, France Propane Explosion 5/45

    1973 Sheffield, UK Gas works Explosion 4/24

    1973 Staten Island, NY LNG Fire 40

    1974 Beaumont, TX Isoprene Explosion 2/10

    1974 Czechoslovakia Ethylene Explosion 14/79

    1974 Decatur, IL Propane Explosion 7/152

    1974 Flixborough, UK Cyclohexane Explosion 28/76

    1974 Houston, TX Butadiene Explosion 1/235

    1974 Madras, India Potassium sol. Hot release 9/15

    1974 Wenatchee, WA MENiterate Explosion 2/66

    1975 Antwerp, Belgium Ethylene Explosion 6

    1975 Beek, Netherlands Propylene Explosion 14/108

    1975 Eagle Pass, TX Propane Fire 16/7

    1975 Philadelphia, Panama Oil vapours Explosion 8/20

    1975 Scunthorpe, UK Water-methyl Explosion 11/15

    1975 South Africa Methane Explosion 7/7

    1976 Chalmette, LA Ethyl benzene Explosion 13/?

    1976 Houston, TX Ammonia Toxic release 6/200

    1976 Los Angles, CA Gasoline Fire 6/35

    1976 Gadsden, AL Gasoline Fire 3/24

    1976 Sandefijord, Norway Flamm. liquid Explosion 6/?

    1976 Seveso, Italy TCDD Toxic release ?/300

    1977 Colombia, USA Ammonia Toxic release 30/22

    1977 Gela, Italy Ethylene oxide Explosion 1/25

    1977 Gujarat, India Hydrogen Explosion 5/35

    1977 Mexico Ammonia Toxic release 2/102

    1977 Umm Said, Qatar LPG Fire 7/87

    1977 Westwego, LA Explosive dust Explosion 35/5

    1978 Chicago, IL Hydrogen sulphate Toxic release 8/29

    1978 Santa Cruz, Mexico Propylene Fire 52/88

    1978 St. Marys, WV Cooling water ? 51/26

    1978 San Carlos, Spain Propylene Explosion 211

    1978 Texas City, TX Butane Fire 7/11

    1978 Waverly, TN Propane Explosion 12/21

    1978 Youngestown, FL Chlorine Toxic release 8/50

    1979 Banter Bay, Eire Oil Explosion 50

    ?, information not available.

    At a refinery at Pernis (Netherlands) in 1968, an over-flow of hydrocarbon caused a small explosion. This trig-gered another small explosion which in turn led to amajor explosion with fire, extensively damaging an areaof about 300 m. Two people were killed and 85 injured(Lees, 1996).

    At Texas city, USA (on 30 May 1978), one of theLPG storage vessels in a petrochemical factory(Mahoney, 1990) suffered overpressure while it wasbeing filled, due to failure of a pressure gauge and alsoof a relief valve. It cracked and leaked LPG. The leakignited into a massive fire ball, which shattered the ves-

  • 370 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Table 9

    List of major accidents in chemical process industries, 19811997

    Year Location Chemical Event Deaths/injured

    1981 Montanas, Mexico Chlorine Toxic release 29/50

    1982 Spencer, OK Heated water Burning 7/12

    1983 Reserve, LA Chlorobutadine Fire and toxic release 3/12

    1983 Houston, TX Methyl bromide Toxic release 2/11

    1984 Brazil Gasoline Fire and toxic release 508/221

    1984 Roeoville, IL Propane Explosion 15/76

    1984 Mexico City, Mexico LPG Fire and explosion 550/23

    1985 Clinton, USA Ammonia Toxic release 5/8

    1985 Breed Ford, UK Ammonia Toxic release 2/13

    1985 Brazil Ammonia Toxic release > 5000 evacuated

    1985 Illinois, USA Naptha Explosion 7/12

    1985 Priola, Italy Ethylene Explosion 23/11

    1985 Algerais, Spain Naptha Explosion and fire 18/56

    1985 Mont Belyieu, TX Propane Fire 4/13

    1986 Basel, Switzerland Fungicide Toxic release ?/severe damage to

    ecosystem

    1986 Ohio, USA HCL Toxic release 3/26

    1986 Kennedy Space Center, FL Hydrogen Explosion 7/119

    1986 Pascagoula, MS Aniline Fire 3/76

    1987 Grangemouth, UK Hydrocarbon Explosion and fire 67/21

    1987 Piper Alpha Hydrogen Explosion 167/55

    1987 Antwerp, Belgium Ethylene oxide Explosion 5/20

    1987 Pampa, TX Acetic acid Explosion 3/43

    1987 Louisiana, TX Hydrocarbon Fire and explosion 15/21

    1988 Maharastra, India Naptha Fire 25/23

    1988 Rafnes, Norway Vinyl cloride Explosion 7/13

    1988 Narco, LA Propane Explosion 7/48

    1989 Antwerp, Belgium Aldehyde Explosion 32/11

    1989 USSR Ammonia Explosion and toxic release 7/57

    1989 Baker, Gulf of Mexico Natural gas Explosion 2/24

    1989 Worms, Germany Carbon dioxide Explosion 3/25

    1989 Pasadena, TX Ethylene Explosion 23/314

    1989 Boston Rouge, LA Ethane Explosion 4/12

    1989 Phillips, USA Ethylene Explosion 23/130

    1990 Channeiview, TX Waste oil Fire 5/13

    1990 Rio de Janerio, Brazil Hydrocarbon Fire 3/?

    1990 Czechoslovakia Hydrogen Explosion 15/26

    1990 Fagaras, Romania Explosives Explosion 21/34

    1990 Thane, India Hydrocarbon Fire and explosion 35/10

    1990 Porto de Leixoes, Portugal Propane Fire and explosion 14/76

    1992 Sodegraura, Japan Hydrogen Explosion 10/7

    1993 Panipat, India Ammonia Explosion and toxic release 3/25

    1994 Dronka, Egypt Fuel Fire 410/?

    1995 Gujrat, India Natural gas Fire ?/?

    1995 Ukhta, Russia Gas Fire 12/?

    1996 Bombay, India Hydrocarbon Fire 2/45

    1997 Chennai, India LPG Fire 3/4

    1997 Chennai, India Molten metal Explosion 2/5

    1997 Gujart, India Hydrocarbon Explosion 3/11

    1997 Visag, India LPG Fire and explosion 60/30

    ?, information not available.

    sel, propelling its fragments as missiles. During the next20 minutes five horizontal bullets and four vertical oneswere damaged by missiles. The other two vessels werealso damaged in this way.On 8 March 1984 an explosion in a refinery at Kerala

    destroyed a fire tender along with the shed in which itwas housed, besides a chemical warehouse, cooling

    tower and other facilities. Later investigations revealedmany shortcomings in the plant layout.On 12 December 1987 a crude oil storage tank in a

    refinery at Maharashtra, India, started boiling over, spill-ing its contents on the dike around it. The emergencyservices were alerted and tried to evacuate the contents.After 4 hours of pumping out, the tank caught fire and

  • 371F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    exploded, spilling the contents. Eight hours of vigorousfire fighting had to be carried out before the fire couldbe controlled. There was extensive damage to the pro-perty. A liberal sizing of the dike and providing a separ-ate dike for a large tank like this would have helped toprevent the spread of fire to other tanks.An accident took place on 18 April 1989 in a 14 inch

    natural gas pipeline owned by a gas company in India.The pipeline was carrying compressed natural gas at apressure of about 295298 psig from the compressorstation to various consumers. The accident occurredabout 730 ft. from the compressor station. Security per-sonnel heard a loud sound at about 09:50 h and saw ahuge cloud of black smoke emanating from the rupturedpipeline which caught fire immediately. The flame roseas high as 150 ft. during the initial stage.The fire damaged buildings consisting of the general

    stores and the office of the materials department. Twoemployees died and six others received burn injuries.Investigations revealed that the portion of the pipelinewhich had blown off was extensively corroded comparedwith other portions of the pipeline. The undergroundpipeline was close to the materials department where oldlead cells were stored. The corrosion could be due to theleakage of spent weak acid which seeped through theground and corroded the buried pipeline.

    5.1.1. Maharashtra accidentOn 5 November 1990 an explosion at the offside bat-

    tery of compressors at a gas cracking plant in Maharash-tra, India, killed 35 people, as well as causing heavydamage to property and business interruption losses.Among the deficiencies in the layout, identified after thedisaster, was the location of a contractors shed danger-ously close to the gas compressors. Less publicised, butperhaps of greater consequence, was the lack of a facilityto shut down the flow of hydrocarbon at the site itself.The plant personnel had to run to the control room fasterthan the vapour that followed them to close the feedvalve.

    5.1.2. Visakhapatnam disasterOn 14 September 1997, a huge fire and explosions

    devastated the terminals and storage tanks at the refineryof HPCL (Hindustan Petroleum Corporation Limited) atVisakhapatnam unit in India. More than 55 people werekilled and dozens of others seriously injured (TheHindu, 1997a).Two bodies were found on the upper storey of the

    administrative block which had collapsed while threemore were seen in the debris underneath by a team ofreporters who ventured in later in the evening. The build-ing, housing, the recreation club and canteen were alsodestroyed.One of the eight Horton spheres or globe tanks, which

    contained LPG, crude and kerosene tanks separately,

    near the main gate of the HPCL refinery, caught fire at06:40 h and exploded, rocking Visakhapatnam city. Thestorage tanks were all full, with crude imports unloadedat the HPCL berth just a few days previously. Thesecond sphere exploded 15 minutes later and beforenoon, the others also caught fire. The blaze spread. Hugetongues of flame and thick black smoke billowed intothe sky and joined the hovering monsoon clouds. Therewas a sharp shower in the morning and people wearingwhite shirts saw them turn black with soot. The rainwater flooding the road also turned black and murky.With both the entrances to the refinery blocked by

    burning tanks, neither the fire tenders nor the officialscould enter the premises for several hours. Only whenthe contents in the tanks were burnt out could they ven-ture in. The death toll could have been higher had thefire started half-an-hour later when the first shift staffwould have been present.Even more significant, as the accident occurred on a

    Sunday, the administrative personnel, who number over200, were not on duty. There were some contract labour-ers along with the HPCL personnel in the Crude Distil-ling Unit which was shut down for routine maintenancework. The shock of the initial explosion made peoplethink an earthquake had occurred. They ran helter-skelter, leaving their belongings behind.

    5.2. Accidents in chemical/petrochemical industries

    On the evening of 21 September 1921, two explosionsoccurred at the Oppau works of Badische Aniline andSodafabrik (BASF) in a span of 3 seconds. Theexplosions created a mammoth crater of 80 m diameter,destroyed the plant, and 700 of the 1000 houses nearby.The explosion was caused by the detonation of some4500 t of a 50:50 mixture of ammonium sulphate andammonium nitrate. It was set off by blasting powder,which was being used to break up storage piles ofmaterial which had become caked. Exactly the same pro-cedure had been carried out without any mishap some16 000 times previously!Even houses in the adjacent city of Ludwigshafen and

    in the Mannheim area were damaged. Walls were dislo-cated and windows broken. At these places and at Heid-elberg, which is about 14 miles from Oppau, the effectof the explosion was first felt by two very heavy earth-quake-like shocks. In Mannheim some seconds later, andin Heidelberg 82 seconds after the shocks, there camean enormous rush of air which broke windows and doorsand caused damage to gas holders, oil tanks, and manyriver barges. The sound of the explosion and the earthshocks reached as far as Bayreuth, a distance of 145miles, and the air pressure wave caused considerabledamage in Frankfurt, which is about 53 miles from thescene of the explosion. The explosion killed 430 people,including 50 people in the village.

  • 372 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    On 3 July 1987 an explosion occurred inside an ethyl-ene oxide purification column at a chemical factory atAntwerp, Belgium (Lees, 1996). The explosion was dueto decomposition of ethylene oxide. It was accompaniedby a fire ball, which started a number of secondary fires.These, together with blasts and missiles, caused exten-sive damage. Fourteen people were injured.Faulty operations at the Tomsk-7 fuels reprocessing

    facility in Russia are believed to have resulted in therunning away of a solution of 500 litres of tributylphosphate (TBP) saturated with strong nitric acid,resulting in explosive failure of the storage vessel andsubsequently blowing out a wall of the reprocessingbuilding. TBP is an important organic solvent used inacidic extraction steps in separation processes at fuelreprocessing facilities. Solutions of TBP, hydrocarbondiluent, and HNO3 (known as red oil because of thecolour of nitrated hydrocarbons) undergo exothermicreactions that can thermally run away if heated to atemperature where the heat of reaction exceeds heat loss-es.A recent accident (14 May 1997) at Hanford was the

    result of a spontaneous (autocatalytic) chemical reactionof the solution stored in a tank (Tank A-109) located inthe plutonium reclamation facility. This 1500 litre tankinitially contained a solution of 0.35 M hydroxylamine(OHNH2HNO3) and 0.25 M nitric acid called CCX sol-ution. The unused solution in the tank had been slowlyevaporating. The loss of water concentrated the solutionuntil conditions were reached that caused a spontaneouschemical decomposition reaction. The reaction created arapid release of gases, which built up pressure inside thetank. The pressure blew the lid off the tank and severelydamaged the room. No casualties were reported as no-one was near at the time of the accident.On 25 November 1997 explosion occurred in a chemi-

    cal factory manufacturing rubber products at Halol inPanchmahal district of Gujrat state. Three persons werekilled and 11 others injured (The Hindu, 1997b). Theexplosion occurred in one of the reactors. Detailed infor-mation is awaited.

    5.2.1. The Flixborough disaster

    The Flixborough plant of Nypro Limited, UK, wasbuilt for the production of caprolactum which is the basicraw material for the production of Nylon 6. Cyclohex-anol necessary for the production of caprolactum wasproduced by oxidation of cyclohexane. The latter chemi-cal, which in many of its properties is comparable withpetrol, had to be stored. More importantly, large quan-tities of cyclohexane had to be circulated through thereactors under a working pressure of about 8.8 kg/cm2

    and a temperature of 155C. The reaction is exothermic;any escape of cyclohexane from the plant was thereforedangerous. The cyclohexane plant at Flixborough con-sists of a stream of six reactors in series in which

    cyclohexane was oxidised to cyclohexanone andcyclohexanol by air injection in the presence of a cata-lyst.On the evening of 27 March 1974, it was discovered

    that reactor number 5 was leaking cyclohexane. The fol-lowing morning an inspection revealed that the leak hadextended by some 6 ft. This was a serious state of affairsand a meeting was called to decide a course of action.A decision was taken to remove reactor 5 and to installa bypass assembly to connect reactor 4 directly to reactor6 so that the plant operation could continue.The openings to be connected on these reactors were

    of 28 inch diameter, but the largest pipe which was avail-able on site and which might be suitable for the by-passwas of 20 inch diameter. The two flanges were at differ-ent heights so that the connection had to take the formof a dogleg of three lengths. Calculations were done tocheck that (a) the pipe had a large enough cross-sectionalarea for the required flow, and (b) that it was capable ofwithstanding the pressure as a straight pipe.But no calculations were done which took into

    account the forces arising from the dog-leg shape of thepipe; no drawing of the by-pass pipe was made otherthan in chalk on the workshop floor; and no pressuretesting was carried out either on the pipe or on the com-plete assembly before it was fitted. A pressure test wasperformed on the plant after the installation of the by-pass, but the equipment was tested to a pressure of 9kg/cm2. Further, the test was pneumatic not hydraulic(Lees, 1996).The plant was restarted. Initially the by-pass assembly

    gave no trouble. On 29 May 1974 the bottom valve onone of the vessels was found to be leaking. The plantwas again shut down for repairs, and restarted on June1. A sudden rise in pressure up to 8.5 kg/cm2 occurredearly in the morning when the temperature in Reactor 1was only 110C and less in the other reactors. Later thatmorning, the pressure reached 9.19.2 kg/cm2.During the late afternoon an event occurred which

    resulted in the escape of large quantities of cyclohexane.This event was the rupture of the dog-leg shaped by-pass system. It was perhaps aided by a fire on a nearby8 inch pipe. The escaped cyclohexane soon caught aspark, and there was a massive unconfined vapour cloudexplosion. The blast and the fire destroyed the cyclohex-ane plant as well as several other plants in the vicinity.Of those working on the site at the time, 28 were

    killed and 36 others suffered injuries. Outside the plant,injuries and damage were widespread but no-one waskilled. Of the 28 people who died 18 were in the controlroom. Some of the bodies had suffered severe damagefrom flying glass. The main office of the factory wasdemolished by the blast of the explosion. Mercifully, theaccident had occurred on a Saturday afternoon when theoffices were not occupied. If they had been, the deathtoll would have been much higher.

  • 373F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Property damage extended over a wide area, and apreliminary survey showed that 184 houses and 167shops and factories had suffered to a greater or alesser degree.

    5.2.2. Seveso disaster

    On the morning of Saturday, 10 July 1976, a safetyvalve vented on a reactor at the Icmesa Chemical Com-pany at Seveso, a town of about 17 000 inhabitants some15 miles from Milan (Italy). A white cloud drifted overpart of the town, heavy rainfall brought the cloud toearth. The release occurred from a reactor producingtrichlorophenol, which is used to make a bactericide hex-achlorophenol and the herbicide 2,4,5 trichloro phenoxyacetic acid. The reactor also contained the chemical gen-erally referred to as TCDD (2,3,7,8-tetrachloro dibenzoparadioxin). This substance was not an intended reactionproduct but an undesired by-product. An estimated 2 kgof TCDD were released, although this estimate is neces-sarily approximate.In normal operations the amount of TCDD made in

    the reactor was small, but on this occasion the reactorhad got out of control. The contents had got overheatedand the safety valve had vented. The higher temperaturein the reactor favoured the production of an abnormalquantity of TCDD.In the immediate area of the release the vegetation

    was contaminated and animals began to die. On thefourth day a child fell ill and on the 5th day civil auth-orities declared a state of emergency in Seveso. An areaof some 2 square miles was declared contaminated andpeople were asked to avoid contact with the vegetationor eating anything from this area. The contaminated areawas later sought to be closed completely. On 27 July thefirst evacuation of some 250 people took place. By theend of July, 250 cases of skin infection had been diag-nosed. Some 100 people had been told to evacuate theirhomes and some 2000 people had been given blood tests.In early August it was found that the area contaminatedwas about five times larger than originally thought(Lees, 1996).

    5.2.3. Other accidents involving TCDD

    There have been accidents involving TCDD releaseprior to the Seveso disaster. At Ludwigshafen, 55 peoplewere exposed when there was accidental TCDD releasein 1953, and many developed severe symptoms ofTCDD poisoning. Various measures were taken todecontaminate the plant building, including the use ofdetergents, the burning off of the surfaces, the removalof insulating material and so on, but these were noteffective and eventually the whole building had to bedestroyed. In another accident at Duphar in 1963, a leakof 0.030.2 kg of TCDD occurred. Some 50 personswere involved in cleaning up the leakage, of whom foursubsequently died, and about a dozen suffered occasional

    skin troubles. The plant was sealed for 10 years and thendismantled from the inside brick by brick, the rubble wasembedded in concrete, and the concrete blocks weresunk in the Atlantic. Five years later yet another accidentinvolving TCDD release occurred at Bolsover. Itinvolved a runaway reaction in a trichlorophenol reactor,similar to the one that later occurred at Seveso. The reac-tion reached 250C, the reactor exploded and the super-vising chemist was killed. The plant was closed down,and then reopened after 2 weeks when it appeared thatworkers exposed had suffered no ill effects. But within7 months, 79 persons complained of TCDD symptoms.The plant was dismantled and buried in a deep hole. Butthe story did not end there; 3 years later contractors onthe site developed TCDD symptoms. The only apparentpossible source of contamination was a metal vesselwhich had been thoroughly cleaned and subjected tosensitive testing.The lesson that emerged from Seveso was that press-

    ure relief valves on plants handling highly toxic sub-stances should not discharge to the atmosphere but to aclosed system.

    5.2.4. The Bhopal disaster

    The worst ever disaster in the history of the chemicalindustry occurred in Bhopal, India, on 3 December 1984.A leak of methyl isocyanate from a chemical plant,where it was used as an intermediate in the manufactureof a pesticide, spread beyond the plant boundary andcaused death by poisoning of over 2500 peopleinjur-ing about 10 times as many.Methyl isocyanate boils at about 40C at atmospheric

    pressure. According to press reports, the contents of thestorage tank became overheated and boiled, causing therelief valves to lift. The discharge of vapourabout 25twas too great for the capacity of the scrubbing sys-tem. The escaping vapour spread beyond the plantboundary where a shanty town had sprung up. The causeof the overheating was contamination of the methyl iso-cyanate, by water or other materials, and several possiblemechanisms were suggested. According to some reports,cyanide was produced. Had Union Carbide conductedrisk analysis (specifically maximum credible accidentanalysis) during the design of the MIC system or evenlater, it would have learnt that in the event of a MICleak the scrubbing system would be inadequate. Thiswould have enabled the industry to install better emerg-ency handling systems, thereby saving thousands of lives(Abbasi, Krishnakumari & Khan, 1997).

    5.2.5. The Worms Explosion

    On 21 November 1988 an explosion occurred in aliquid storage vessel of Proctor Gamble, Worms, Ger-many. The explosion was supposed to be the worstamong ever explosion in cryogenic storage of liquefiedcarbon dioxide. The storage tank was a horizontal-high-

  • 374 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    pressure vessel having a nominal capacity of 30 t of car-bon oxide and was well connected to a relief andsafety system.The main reasons for the explosion were identified as:

    (a) overheating causing excessive pressure and failure ofthe relief valve; (b) brittle failure of a tank at or nearnormal operation; (c) a combination of the above. Adetailed investigation has been carried out by the FederalGovernment as well as Proctor Gamble to find the realcauses of the failure. It was found that tank was brittlefailure from two position (non uniformfaulty design).Due to excessive pressure, liquid carbon dioxide escap-ing from the relief valve reached a critical point andsealed the relief valve by forming dry ice. This preventedthe gas from escaping and hence an explosion tookplace.The explosion intensity was so great that it destroyed

    two neighbouring units. An excess of pressure of morethan 1 atm was reported over a radius of 1000 m. Theshock wave velocity also exceeded 500 m/s. Fragmentsof vessel of more than 100 kg were found more than500 m from the site of the accident. Good planning ofthe units location ensured that no hazardous chemicalswere stored nearby, so only mechanical damage tookplace.The consequences of explosion were three fatalities at

    the site, more than 10 people hospitalised and an esti-mated damage of $20 million with 3 months of pro-duction lost.

    5.2.6. Pepcon explosion

    On 4 May 1988 a massive explosion destroyed aPacific Engineering and Production Company(PEPCON) plant near Henderson, about 12 miles southof Las Vegas, USA.PEPCON was one of only two plants in the USA that

    produced ammonium perchlorate (AP); the other was theKerr-McGee plant, also located in Henderson about 2miles from the PEPCON plant. PEPCON reportedly pro-duced about one-third of the AP used as an oxidiser andpropellant in solid, composite rocket fuels for NASAsspace shuttle and missiles.Although a fire started the PEPCON explosion, the

    cause of the fire was not easy to explain. After theexplosion, PEPCON blamed the fire on a leaking under-ground pipeline of Southwest Gas Company that tra-versed PEPCONS property. But the natural gas pipelinehad been installed about 10 years before the PEPCONplant had been built, and although ruptured, it only con-tributed to the fire and heat required to detonate thesecond and the largest explosion.The fire was also attributed to a welders torch but

    one of the reports absolved the welder of any blame.Some blamed the batch dryers fibre glass insulationwhich had a history of AP spills into the combustibleinsulation.

    The following were the tell-tale conditions in andaround PEPCON:

    I lack of proper storage;I combustible fibre glass insulation and sources of fire;I glass panel walls in the batch house;I inadequate spacing between adjacent process vesselsand product storage tanks;

    I no alarm to warn plant personnel, fire departments orHendersons other citizens;

    I no dependable fire-fighting arrangement with sprink-lers and deluge system;

    I no modern, dependable, radio system to back-up dam-aged telephone lines needed to call for help, co-ordi-nate response teams and warn the community;

    I lack of an effective emergency response plan at PEP-CON, within the surrounding industrial complex andwithin the town of Henderson.

    The explosion caused about $100 million in damageto the surrounding community and completely destroyeda neighbouring marshmallow plant. About 350 personswere injured. Two persons diedthe plant manager andthe controller.

    5.2.7. The Phillips explosionThe explosion at the Phillips petrochemical (similar

    to the present case study) plant in Pasadena, Texas, on23 October 1989 is one of the worst industrial accidentsof the last 10 years.The immediate cause was simple: a length of pipe was

    opened up to clear a choke without bothering to see thatthe isolation valve (which was operated by compressedair) had not been closed. The air hoses which suppliedpower to the valve were connected up the wrong wayaround so the valve was open when its actuator was inthe closed position. Identical couplings were used for thetwo connections so it was easy to reverse them. Accord-ing to company procedure they should have been discon-nected during maintenance but they were not. The valvecould be locked open or closed but this hardly matteredas the lock was missing. The explosion occurred lessthan 2 minutes after the leak started and two iso-butanetanks exploded 15 minutes later. The explosive forcewas equivalent to 2.4 t of TNT; 23 peopleallemployeeswere killed and over 130 injured. Nearly 40t of ethylene gas leaked and exploded.

    5.2.8. Panipat explosionOne evening during August 1993 there was an

    explosion at the National Fertiliser Limited (NFL) ferti-liser plant near Panipat, which later followed by toxicrelease and dispersion of the deadly gas, ammonia. Anaccurate official report on what happened and how, hasnot as yet been made available. However, some reliablesources reported that one evening an operator observeda leak in one of the vessels, which he reported to the

  • 375F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    supervisor. To rectify the problem the vessel was iso-lated and repaired. After repair, the vessel was broughtback into operation without checking whether the iso-lation (slip plate) device had been removed. Pressuregradually built up inside the vessel and after a few hoursan explosion (BLEVE) occurred, spreading the contentsof the vessel over the area. As the plant was situated farfrom a populated area and the quantity was not too great,the consequences were not severe.Four members of the operating team and two shift

    engineers died, more than 25 people were injured andmore than 1000 people were adversely affected. Thepresence of proper safety arrangements prevented thedeath toll and damage from being much greater. Severedamage was inflicted on an area of around 2 km2 andthe cost of the damage has been estimated to be around$20 million.

    5.3. Accidents at other facilities

    On 22 June 1974 a 16 inch elbow of a pipe carryingpotassium carbonate solution in a fertiliser plant at Tam-ilnadu, India, ruptured suddenly, splashing the hot sol-ution into the nearby control room. The toughened glasspanes shattered; eight people died in the control roominstantaneously, one died in the hospital and others sus-tained grievous injuries.On 31 August 1997 a blast occurred at Sterlite copper

    smelter plant at Tuticorin, Tamilnadu state. Two peoplewere killed and two were seriously injured. Accordingto the management report, four strong blasts occurred ina rotary holding furnace in a period of 30 seconds (TheHindu, 1997c). The blasts were so intense they wereaudible even 10 km from the site of the accident. Dueto the blast molten copper and slag at a temperature of1200C spilled out over the whole area.

    5.3.1. The Siberian accident

    Perhaps the most macabre accidentnext only to theBhopal gas tragedy in its severityoccurred on 3 June1989, near Nizhnevartovsk in western Siberia. Engineersnoticed a sudden drop in pressure at the pumping endof an LPG pipeline. The pipeline was commissioned in1985 to carry mixed LPG to feed the industrial city ofUfa. Instead of investigating the trouble, the engineersresponded by increasing the pumping rate in order tomaintain the required pressure in the pipeline. The actualleakage point was about 890 miles downstream betweenthe towns of Asma and Ufa, where the pipeline wasinstalled about 1/2 mile away from the Trans-SiberianRailway. The smell of escaping gas was reported fromthe valley settlements in the area but no-one did anythingabout it. The escaping liquefied gas formed two largepockets in the low lying areas along the railway line.The gas cloud then drifted for a distance of 5 miles.Some hours later, after the main leakage had started, a

    train from Nizhnevartovsk destined for the Red Searesort of Alder was approaching the leakage area whenthe driver noticed a fog in the area that had a strongsmell. The driver of another train approaching from theopposite direction (Alder to Nizhnevartovsk) saw muchthe same as he approached the west-bound train. Bothtrains were full, with a total of 1168 people on board,and as they approached the area, the turbulence causedby them mixed up LPG mist and vapour with the overly-ing air to form a flammable cloud. One of the trainsignited the cloud. Several explosions took place in quicksuccession, followed by a ball of fire that was about 1mile wide and which raced down the railway track inboth directions. Trees were flattened within a radius of2.5 miles of the epicentre of the explosions and windowswere broken up to 8 miles away. The accident left 462dead and 796 hospitalised with 7080% burn injuries.

    5.3.2. Sao Paulo accidentOn 25 February 1984, at least 508 people, most of

    them young children, were killed in Sao Paulo (Brazil)when a gasoline pipe 2 ft. in diameter ruptured and 700t of gasoline spread across a strip of swamp. The causeof the pipe rupture was not reported, though it was saidto have been brought to a pressure above the safetythreshold. It was also stated that there was no way ofmonitoring the pressure in the pipeline.

    5.3.3. The Basel disaster

    On 1 November 1986, a warehouse at Sandoz nearBasel caught fire and burned. The warehouse containedten types of pesticide, totalling about 1200 t, and 12 tof mercuric fungicide. Most of these chemicals are toxicto both humans and animals. Around 70 to 80% of thestored chemicals have been drained out in differentforms due to fire. Although an alarm was given, the citi-zens of Basel received no relevant information and werein a state of disquiet for several hours. The health of theRiver Rhine nearby was seriously endangered. Severalmiles of the river turned a red colour and all aquatic lifewas destroyed. Nearby vegetation was also adverselyaffected.In total, 50 000 people were affected, and approxi-

    mately 5 km2 of river, ground water and 2 km2 of soilwere contaminated. The total damage was estimated as$SFR 100 million.

    6. Accident analysis

    6.1. Fatalityfrequency (FN) analysis

    FN curves, also known as social risk plots, representthe probability of fatalities as a function of the numberof fatalities. Maximum fatalities have been observed infixed installation accidents (47%) followed by transpor-

  • 376 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Fig. 8. FN curves for transportation and fixed installation accidents.

    tation accidents (34%). However, the FN curve for trans-portation accidents (Fig. 8) is more flat than the curvepertaining to fixed installation accidents, indicating thatthe probability of fatality is higher in transportation acci-dents than in fixed installation accidents. In other words,fatalities per accident are higher during transportationthan in a fixed installation. This is apparently due to theadditional risks a hazardous unit faces when it is in tran-sit compared to when it is fixed. Further, if an industrywhere a fixed installation accident takes place has anefficient emergency preparedness programme in place,the damage may be contained. Such damage control israrely possible if a vessel fails due to a transportationaccident, or during transit.The FN curves also reveal that fires and explosions

    cause more fatalities per accident compared with toxicrelease (Fig. 9). The possible reason may be that onlydeaths occurring immediately after the toxic release arereported in the literature. Long-term chronic impactswhich could be very significantdo not normally cometo light. Of the total fatalities due to fixed installation

    Fig. 9. FN curves for fire and explosion, and toxic release accidents.

    Fig. 10. Trend of vapour cloud explosions.

    accidents, about 49% have been attributed to fires andexplosions, 38% to toxic release and 13% to combi-nations of these effects. The average fatality per accidentin fixed installations is 2.32; it is 3.27 for fire andexplosion, and 2.49 for toxic release. The FN curve forfire and explosion includes fire, vapour cloud explosion(VCE), confined vapour cloud explosion (CVCE) andboiling liquid expanding vapour cloud explosion(BLEVE). The number of explosions (either type) hasbeen plotted as a function of a 5 year moving averagein Fig. 10. It is evident from the figure that during 19751979 a large number of explosions were reported, whilesubsequently there was a sharp decrease. To study thedamage consequence of each accidental event, FNcurves for various accidental events (explosions, fires,and toxic release) are presented in Fig. 11. It can beobserved that the curve for VCE is the flattest, while thatfor fire is the steepest, indicating that VCE has the high-est risk of fatalities while fire has the least.

    Fig. 11. FN curves for various accidental events.

  • 377F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    An illustrative table of fatality rates due to accidentsin different countries is presented in Table 10. TheNetherlands has the lowest fatality rate per accidentwhile Austria and Belgium have the highest.

    7. Conclusion

    From a study of the available models of accidents andcase studies, the following conclusions can be drawn.

    I Most of accidents take place due to malfunctioning ofa component of equipment and/or minor negligenceof personnel during operation or maintenance.

    I Although the number of accidents per year hasdeclined through the 1980s, the extent of damage peraccident has increased substantially. This is parti-cularly true in developing countries such as India.

    I The damage potential of an accident depends upon thechemical in use, causative factors, operating con-ditions and site characteristics.

    I The damage potential in terms of the area affected isa maximum for toxic release and depends upon thetype of chemical, meteorological conditions and sitecharacteristics.

    I The impacts of fires and explosions extend over muchlesser areas but the devastation caused is moreimmediate and severe than in most cases of toxicrelease (except in cases such as the MIC leak at Bho-pal in 1989). Fire and explosions can also cause adomino effect (chain of accidents).

    I The number of fatalities per accident is highest forthose involving explosions.

    Table 10

    Fatal accidents in manufacturing industry in different countries

    (Raghavan & Swaminathan, 1996)

    Fatality rate

    Deaths per 1000 Deaths per 100 000

    man-years workers per year

    Argentina 0.020

    Austria 0.142

    Belgium 0.140

    Canada 0.080 14

    Czechoslovakia 0.061

    France 0.068 11

    Germany (FRG) 0.120 17

    Germany (GDR) 0.030

    Italy 8

    Japan 0.010 5

    Netherlands 0.009 4

    Norway 0.050

    Poland 0.066

    Spain 0.109

    Switzerland 0.080

    UK 0.020 4

    USA 0.022 7

    I Pipeline transport of chemicals is comparatively safe,provided that the line is carefully maintained and itsroute does not pass through populated areas.

    I With an increase in density of industries in a complex,the probability of accidents as well as that of the dom-ino effect increase sharply.

    The study highlights the need for accident forecasting,consequence assessment, and development of up-to-dateemergency preparedness and disaster management plansin the chemical process industries.

    References

    Abbasi, S. A., Krishnakumari, P., & Khan, F. I. (1997). HOT topics:

    global warming, ozone hole, diversity, acid rain, industrial haz-

    ards, and disinfection. Chennai, India: Oxford Press.

    Amendola, A., Contini, S., & Nichele, P. (1988). MARS; the major

    accident reporting system. Preventing Major Chemical and Related

    Process Accidents, 445, 11211141.

    Amesz, J., Francocci, G., Primavera, R., & VanderPas, T. (1983). The

    European abnormal occurrences reporting system. Euredata, 4, 6.2.

    Badoux, R. A. J. (1983). Some experience of a consulting statistician

    in industrial safety and reliability. Third National Reliability Con-

    ference. See also Reliability Engineering (1985), 10, 219228.

    Bellamy, I. J., Geyer, T. A. W., & Astley, J. A. (1989). Evaluation of

    the human contribution to pipework and in-line equipment failures

    frequencies. HSE Contract Res. Rep. 15/1989. Technica Ltd, Lon-

    don.

    Bruce, R.A.P. (1994). The offshore hydrocarbon releases (HCR) datab-

    ase. Hazards, XII, 107.

    Carson, P.A., & Mumford, C.J. (1988). Reporting and analysis of

    industrial incident 198186. Industry and Environment, II(2),

    1119.

    Chemical Industrial Digest (1995). Mumbai: Blockdale.

    Chowdhury, J., & Parkinson, G. (1992). OSHA tightens its hold.

    Chemical Eng., 99(5), 37.

    Davenport, J.A. (1988). Hazards and protection of pressure storage and

    transport of LP-gas. Journal of Hazardous Materials, 20, 311.

    Doyle, W.H. (1969). Industrial explosions and insurance. Loss Preven-

    tion, 3, 11.

    Doyle, W.H. (1981). Case histories in duct fire incident. Loss Preven-

    tion, 14, 181.

    Drogaris, G. (1991). Major accidents reporting system: lessons learned

    from accidents notified. Community Documentation Centre on

    Industrial Risk.

    Drogaris, G. (1993). Major accident reporting system. Amsterdam:

    Elsevier.

    Geyer, T. A. W., & Bellamy, L. J. (1991). Pipe-work failure, failure

    causes and the management factor. Paper C425/012, Institute of

    Mechanical Engineers, London.

    Gugan, K. (1979). Unconfined vapour cloud explosion. Rugby: Insti-

    tute of Chemical Engineers.

    Gupta, K. C. (1990). Major accident hazard control system in India.

    International Conference on Hazard Assessment and Disaster Miti-

    gation in Petroleum and Chemical Process Industries, 1014

    December, Chennai.

    Hasstrup, P., & Brochoff, K.C. (1990). Severity of accidents with haz-

    ardous materials. Journal of Loss Prevention in Process Industries,

    3, 33.

    Health and Safety Executive (1988). COSHH assessments. London:

    HM Stationery Office.

    Houston, D.E.L. (1971). New approaches to the safety problem. Major

    Loss Prevention, 210, 4552.

  • 378 F.I. Khan, S.A. Abbasi /Journal of Loss Prevention in the Process Industries 12 (1999) 361378

    Khan, F.I., & Abbasi, S.A. (1995). Accident during transportation of

    hazardous chemicals. Chemical Weekly, 1519May, 9.

    Khan, F.I., & Abbasi, S.A. (1996). Simulation of accidents in a chemi-

    cal process industry using software MAXCRED. Indian Journal of

    Chemical Technology, 3, 338344.

    Khan, F.I., & Abbasi, S.A. (1997). Risk analysis of epichlohydrin

    manufacturing industry using new computer automated tool

    MAXCRED. Journal of Loss Prevention in Process Industries,

    10(2), 91100.

    Kharbanda, O. P., & Stallworthy, E. E. (1988). Safety in chemical

    industrylessons from major disasters. London: Heinemann Pro-

    fessional Publishing Ltd.

    Kletz, T.A. (1991a). The Philips explosionthis is where I came in.

    Chemical Eng., 493, 4753.

    Kletz, T.A. (1991b). Process safetyan engineering achievement.

    Proceedings of the Institute of Mechanical Engineers, 205, 1123.

    Kletz, T.A. (1988). Piper Alpha: latest chapter in a long history. The

    Chemical Engineer, 4(July), 277.

    Kletz, T. A., (1989). What went wrong. London: Gulf.

    Koivisto, R., Vaija, P., & Dohnal, M. (1989). Intelligent interface of

    accident databases. Loss Prevention and Safety Promotion, 6, 98.1.

    Koivisto, R., & Nielsen, D. (1994). FIREa database on chemical

    warehouse fires. Journal of Loss Prevention in Process Industries,

    7, 209.

    Lees, F.P. (1980). Accident fatality numbera supplementary risk cri-

    terion. Loss Prevention and Safety Promotion, 3(2), 426.

    Lees, F.P. (1994). Major accident inquirieslawyers or engineers?

    Process Safety Environ., 72B, 10.

    Lees, F. P., (1996). Loss prevention in chemical process industries.

    London: Butterworth.

    Lees, F. P., & Ang, M. L. (1984). Safety cases in control of industrial

    major accident hazards (CIMAH regulation 1984). London: But-

    terworth.

    Lewis, D. J. (1984). Case histories of past accidents, the causes and

    consequences. In J. I. Petts, Major hazard installation: Planning

    and assessment. Loughborough University of Technology, UK.

    Lewis, D. J. (1993). Case histories: accidents. Department of Chemical

    Engineering, Loughborough University of Technology, UK.

    Loss Prevention Bulletin. List of accidents, 1981, 1982, 1983, 1984,

    1986. Rugby: The Institute of Chemical Engineers.

    Mahoney, D. G. (1990). Large property damage losses in the hydro-

    carbon-chemical industries: a thirty-year review (13th ed.). New

    York: M&M Protection Consultants.

    Marshall, V.C. (1977). What are major hazards? Safety Surveyor,

    5(3), 5.

    Marshall, V. C. (1987).Major chemical hazards. Chichester: Ellis Hor-

    wood.

    Nash, J. R. (1976). Darkest hours. Chicago: Nelson Hall.

    Norstrom, G.P. (1982). Fire/explosion losses in the CPI. Chem. Eng.

    Prog., 78(8), 80.

    Palmer, K.N. (1983). Explosions in flammable smokes from smoulder-

    ing fires. Loss Prevention and Safety Promotion, 4(3), D11.

    Prugh, R.W. (1991). Quantitative evaluation of BLEVE hazards. Jour-

    nal of Fire Protection Engineering, 3(1), 921.

    Raghavan, K. V., & Swaminathan, G. (1996). Hazard Assessment and

    Disaster Mitigation in Petrochemical Industries. Chennai: Oxford

    Publishing Company.

    Suchman, E.A. (1961). A conceptual analysis of the accident problem.

    Social Problems, 8(3), 241246.

    Taylor, J.R. (1993). Use of simulation for emergency planning and

    training. Health, Safety and Loss Prevention, 387, 114119.

    The Hindu (1997). Major fire in Vizag refinery. The Hindu, 15 Sep-

    tember, p. 1.

    The Hindu (1997a). Blast in a factory. The Hindu, 25 November, p. 11.

    The Hindu (1997b). Blast in sterlite claims two lives. The Hindu, 31

    August, p. 15.

    Thomas, I.F. (1995). The politics of safety. Chemical Eng. of Aus-

    tralia, 20(1), 1421.

    TPL (1992). Risk analysis of storage unit of chemical process industry.

    Manali, Madras, India: Tamilnadu Petrochemical Ltd.

    Wells, G.L., Phang, C., Wardman, M., & Whetton, C. (1992). Incident

    scenarios: their identification and evaluation. Process Safety

    Environ, 70B, 179.