By Investigative News Desk
Updated and Expanded Analysis
Introduction and Main Facts
The U.S. Chemical Safety and Hazard Investigation Board (CSB) has released a compelling and deeply troubling safety video detailing its exhaustive investigation into the fatal fire that erupted on September 20, 2022, at the BP-Husky refinery in Oregon, Ohio. The catastrophe claimed the lives of two refinery employees—who tragically were brothers—after a series of cascading operational failures, miscommunications, and protocol breakdowns allowed highly volatile liquid naphtha to spill directly onto the ground.
The released video, aptly titled “Alarming Mistakes, Deadly Decisions: Fatal Fire at BP-Husky,” incorporates detailed digital animations reconstructing the final hours of the incident, alongside expert commentary from CSB Board Member Dr. Sylvia Johnson, Investigator-In-Charge Bill Steiner, and Investigator Melinda Hartz. The video serves not merely as a post-mortem of a single industrial accident, but as a stark indictment of how modern petrochemical facilities handle abnormal operations, cognitive overload, and emergency communication.
According to the CSB’s findings, the tragedy was rooted in the uncontrolled release of highly flammable liquid naphtha from a pressurized vessel during an unmitigated emergency response. Once exposed to the atmosphere, the liquid rapidly vaporized, creating a massive, highly combustible vapor cloud that drifted across the facility. When the cloud eventually made contact with an ignition source—a furnace in the refinery’s Crude Unit 1—it triggered an instantaneous, devastating flash fire that engulfed the two workers.
The incident underscores vulnerabilities that plague heavy industrial manufacturing sectors across the globe: the inherent dangers of alarm fatigue, the catastrophic risks of fluid mismanagement in pressurized drums, and the failure of leadership to communicate critical shift-handover strategies during unfolding operational crises.
Chronology of a Disaster: 24 Hours of Escalating Danger
The sequence of events leading up to the fatal flash fire did not happen in a vacuum. The CSB investigation revealed that the disaster was the culmination of a 24-hour deterioration in process safety, characterized by missed interventions, compounding errors, and mounting physical stress on plant infrastructure and personnel alike.
Phase 1: The Initial Upset and Loss of Containment
The crisis began in the early morning hours of September 20, 2022. At approximately 3:20 a.m., a routine process upset occurred within the refinery’s naphtha hydrotreater unit. This upset triggered a sudden loss of containment, destabilizing the broader facility and forcing operators to initiate emergency shutdowns of several interconnected refinery units.
As the plant struggled to regain equilibrium, management and board operators were forced to make rapid-fire containment decisions. Unfortunately, these decisions inadvertently channeled liquid naphtha into the fuel gas mix drum. Designed strictly to contain and manage gaseous fuel vapor under pressure, the mix drum was ill-equipped to handle an influx of high-density liquid hydrocarbons.
Phase 2: The Overflow and the "Alarm Flood"
As the fuel gas mix drum filled rapidly with liquid naphtha, the vessel quickly reached maximum capacity and began to overflow. The excess liquid spilled directly into downstream vapor piping leading to critical facility furnaces and boilers—a catastrophic state that threatened to spark simultaneous furnace fires or catastrophic internal explosions.
Recognizing the abnormal and highly dangerous state of the fuel gas mix drum, a board operator in the central control room issued a critical command to field personnel: drain the accumulated liquid from the mix drum “as fast as you guys can.”
Concurrently, the refinery was drowning in data. Over the 12 hours preceding the flash fire—specifically between 6:50 a.m. and 6:49 p.m.—control room operators were subjected to an overwhelming "alarm flood." A staggering 3,712 alarms blared through the control room during this window. This relentless cascade of acoustic and visual alerts severely degraded operator situational awareness, causing critical delays, miscommunications, and cognitive exhaustion among the BP workforce.
Phase 3: The Fatal Decision and the Flash Fire
Acting under immense pressure, two BP employees (the brothers) responded to the board operator’s directive. To execute the drain, they opened several manual valves directly on the mix drum, releasing the contents onto the open ground below.
Crucially, the CSB’s investigation report uncovered a fatal misconception: evidence suggests the workers may have firmly believed they were draining a benign, non-flammable amine-water solution, rather than highly volatile and combustible liquid naphtha.
As the pressurized liquid hit the ground, it instantly vaporized into the ambient air, blanketing the area in a dense, invisible vapor cloud. For hours, the cloud drifted undetected across the facility. Then, at precisely 6:46 p.m., the flammable cloud reached the operational furnace of Crude Unit 1. The resulting ignition was instantaneous and catastrophic. The massive flash fire engulfed the immediate area, delivering fatal injuries to the two brothers who were executing the drainage order.
Supporting Data and Systemic Vulnerabilities
The CSB investigation highlights several systemic failures that transformed an initial mechanical upset into a fatal workplace disaster. The board’s analysis focuses heavily on quantitative metrics of failure—most notably the alarm flood and leadership missteps.
1. Alarm Fatigue and Cognitive Overload
The metric of 3,712 alarms in 12 hours represents a textbook case of alarm flooding. In high-stakes environments like oil refineries, control systems are designed to alert operators to anomalies. However, when alarms sound at a rate of more than five per minute over half a day, the system defeats its own purpose. Operators experience cognitive overload, rendering them incapable of distinguishing between minor status changes and life-threatening emergencies. The CSB noted that the board operators lacked the advanced software tools and alarm management safeguards necessary to filter, prioritize, and effectively navigate the crisis.
2. Leadership Breakdown and Communication Failures
In the mid-afternoon of September 20, as the crisis approached its 12-hour mark, refinery leadership and process engineering personnel convened an urgent meeting. The purpose was to assess the unstable situation and formulate a strategy for the oncoming night shift.
During this conference, leadership debated two primary options: shutting down Crude Unit 1 entirely, or placing Crude Unit 1 into a "circulation" loop. This was intended to stabilize the Crude 1 Tower operations while the naphtha hydrotreater remained offline and the Coker Gas Plant was bypassed.
Ultimately, the leadership group paralyzed itself with indecision, deciding against both a full shutdown and the circulation strategy. Instead, they allowed the crude oil feed to continue flowing unabated into an unstable unit.
Compounding this failure of nerve was a failure of documentation. One meeting participant summarized the inconclusive outcome in an email outlining agreed-upon actions. However, this email was never sent. There is zero evidence in the record indicating that the tactical decisions—or lack thereof—were communicated to the incoming night shift refinery coordinator or board operators, either verbally or in writing. The night shift stepped blindly into a disaster zone.
Official Responses and Regulatory Analysis
The release of the CSB safety video has prompted renewed scrutiny from industrial safety advocates, labor organizations, and federal investigators.
In the video, CSB Board Member Dr. Sylvia Johnson emphasized the preventable nature of the catastrophe:
"This tragic incident unfolded over a period of 24 hours, and during that time there were more than 3,700 alarms that sounded. There were many missed opportunities to prevent the fatal flash fire. Our investigation found that operators did not recognize the serious danger unfolding around them or have the tools and safeguards to effectively manage the highly stressful abnormal situation indicated by the alarm flood."
The CSB’s final report and companion video center on four key safety pillars that failed at the BP-Husky facility:
- Liquid Overflow Prevention: Inadequate engineering safeguards to prevent liquid accumulation in vapor-service drums.
- Abnormal Situation Management: Lack of operational protocols and training for handling cascading plant-wide upsets.
- Alarm Flood Mitigation: Failure to manage and suppress nuisance alarms during critical operational emergencies.
- Learning from Incidents: A breakdown in institutional memory and the failure to apply lessons learned from past industry accidents.
As a result of these findings, the CSB has issued formal, targeted safety recommendations to the American Petroleum Institute (API) and the current facility operators, the Ohio Refining Company, LLC, urging them to overhaul industry-wide standards for pressure vessel drainage and alarm rationalization.
Dr. Johnson concluded her remarks in the video with a direct call to action for the petrochemical industry:
"The tragic loss of life underscores the importance of putting in place tools that employees need to perform tasks safely, such as stop-work authority, and having adequate policies, procedures, and safeguards in place to effectively manage highly stressful abnormal situations. Doing so will help prevent a future needless tragedy."
Implications for the Petrochemical Industry
The tragedy at the BP-Husky refinery in Oregon, Ohio, serves as a sobering reminder that safety in heavy industry is fragile, relying as much on human communication and cognitive bandwidth as it does on physical steel and automated valves.
The implications of the CSB’s findings extend far beyond the gates of the Ohio facility:
- Empowering the Workforce: The incident highlights the urgent need to enshrine and protect unconditional Stop-Work Authority (SWA). Frontline workers must feel fully empowered to halt operations when instructions are ambiguous, procedures are unclear, or conditions deviate from established safety envelopes—without fear of reprisal or production pressures.
- Modernizing Control Rooms: Industrial facilities must accelerate the adoption of advanced alarm management systems compliant with standards like ISA-18.2. Allowing control room operators to be buried under thousands of unmanaged alarms is a systemic invitation to human error.
- Rigorous Handover Protocols: Shift changeovers are among the most vulnerable windows in continuous-operation plants. The failure of leadership to communicate critical operational decisions in writing during the BP-Husky crisis demonstrates that informal or unexecuted handovers can have lethal consequences.
Until refineries and chemical plants fundamentally modernize their human-factors engineering, management-of-change procedures, and crisis communication protocols, the ghost of the BP-Husky disaster will remain a haunting testament to what happens when warning signs are ignored and systems are pushed past their breaking points.
