On the morning of 5 October 1999, at about 08:09 BST, a Thames Trains Class 165 Turbo diesel unit leaving London Paddington passed signal SN109 while it was displaying a red stop aspect, ran on into the path of an oncoming First Great Western InterCity 125 high-speed train, and collided with it almost head-on roughly two miles out of the station, near Ladbroke Grove. The combined closing speed was around 130 mph. The diesel fuel from the Turbo ignited; the worst of the fire took hold in the leading coach of the HST. Thirty-one people died, including both drivers, and 417 were injured. It remains one of the worst rail accidents in late-twentieth-century Britain.
The public inquiry chaired by Lord Cullen did not reduce the disaster to a single mistake. The immediate event was a signal passed at danger (a SPAD): the 31-year-old Thames Trains driver, Michael Hodder, passed the single yellow caution at signal SN87 without slowing and then passed the red at SN109, some 563 metres before impact, apparently believing he had a proceed aspect. But Cullen found that the SPAD was made possible, and arguably made likely, by a system that had stacked the odds against the man in the cab. Signal SN109 was badly sighted — its aspect was obstructed and confused by the overhead-line gantry and the geometry of the approach, and on a bright autumn morning low sunlight washed out the signals. The signal had already been passed at danger eight times in the six years before the crash, yet no effective action had been taken and drivers were not warned. Hodder himself had qualified only about two weeks earlier, had no prior railway experience, and had been trained by instructors who did not know SN109 was a notorious multi-SPAD signal.
Because the cause was operational and distributed across the driver, the signal, the training regime and the management of a known hazard, the finding here is recorded as multi-factor. The infrastructure also lacked the one technology that would have stopped the train automatically: Automatic Train Protection (ATP) had been trialled but not adopted across the network, a decision taken largely on cost. Cullen’s two-part inquiry produced a sweeping set of recommendations and reshaped the regulation and management of British railway safety.
The legal reckoning fell on the corporate operators rather than on any individual. Thames Trains was fined two million pounds in 2004 for health-and-safety failures in driver training. Network Rail, as Railtrack’s successor in respect of the infrastructure, pleaded guilty and was fined four million pounds in 2007, both companies meeting substantial costs. No one was convicted of manslaughter.
At about 4:22 p.m. Pacific time on Friday, 12 September 2008, westbound Metrolink commuter train 111 ran past a red signal at Control Point Topanga, near the Chatsworth district of Los Angeles, and continued onto a single-track section straight into the path of eastbound Union Pacific freight train LOF65-12. The two trains met head-on. Twenty-five people died, including the Metrolink engineer; about 102 passengers were taken to hospitals, with dozens critically hurt. It was the deadliest accident in Metrolink’s history and, at the time, one of the worst US passenger-rail collisions in decades.
The investigation by the National Transportation Safety Board established the cause with unusual directness, because the engineer’s actions in the final minute were recorded in the cellular network. The Metrolink engineer, 46-year-old Robert Sanchez — employed by the contractor that supplied Metrolink’s train crews — had been exchanging text messages throughout his shift with a teenage railfan, and sent his last text at 4:22:01 p.m., roughly twenty-two seconds before impact. He did not observe and respond to the red stop signal at Control Point Topanga, did not slow, and never applied the brakes. The Union Pacific engineer applied emergency braking about two seconds before the collision, far too late to matter.
The NTSB’s probable cause is stated plainly: “the failure of the Metrolink engineer to observe and appropriately respond to the red signal aspect at Control Point Topanga because he was engaged in prohibited use of a wireless device, specifically text messaging, that distracted him from his duties.” Because the determining act was the operator’s distraction and failure at the controls, the finding here is recorded as driver. The Board further found, as a contributing factor, the absence of a positive train control system that would have automatically stopped train 111 short of the red signal and prevented the collision.
The case became the catalyst for a national change in US railway safety law. Within weeks Congress passed the Rail Safety Improvement Act of 2008, mandating the installation of positive train control (PTC) on main lines carrying passengers and on key freight routes. A federal liability cap limited the aggregate recovery for all passenger claims to 200 million dollars, which a court had to apportion among the many victims.
On the afternoon of 19 September 1997, a Great Western Trains InterCity 125 high-speed train ran past two cautionary signals and a red stop signal at Southall, in west London, and collided with a heavy freight train that was crossing its path between the main lines and a goods yard. Seven people were killed and around 139 injured. The passenger train’s two protective systems — the Automatic Warning System fitted to all such trains, and the Automatic Train Protection installed on this particular fleet — were both inactive at the moment they were needed. The result was that a momentary lapse by a distracted driver was converted into a fatal collision that the technology aboard the train was specifically designed to prevent.
The HST, running the late-morning service from Swansea to London Paddington, was approaching Southall at line speed, around 125 mph, behind a single driver, Larry Harrison. The signals protecting the junction ahead were against him: a double-yellow warning, then a single-yellow warning, then red. The driver did not respond to the cautionary aspects — by his own account he was stowing belongings in his bag and did not register the warnings — and only applied the emergency brake when the red signal and the crossing freight came into view. By then the train could not be stopped. It struck the freight train’s wagons at well over 80 mph; the leading carriages were destroyed.
Why the train ran the signals without any automatic intervention was the heart of the inquiry. The HST’s AWS, which sounds a warning in the cab at every cautionary or red signal and applies the brakes if the driver does not acknowledge it, had been isolated earlier that day because of a fault, and crucially neither Railtrack nor the signaller had been told the train was running with it off. The more capable Automatic Train Protection, fitted to this Great Western fleet, was present but not in use because the driver was not trained to operate it and no qualified second person was in the cab. With both safeguards out of action, nothing stood between the driver’s distraction and the red signal but the driver himself.
The accident was examined in a public inquiry chaired by Professor John Uff QC. Its conclusion placed the immediate cause with the driver — a signal passed at danger after he failed to react to clear cautionary warnings — while condemning the operating regime that had allowed a high-speed train to run with its AWS isolated, its ATP unused, and only one person in the cab to catch a mistake. The criminal reckoning was uneven: Great Western Trains was fined £1.5 million under health-and-safety law, but manslaughter and corporate-manslaughter proceedings collapsed. The lasting legacy was the accelerated rollout of the Train Protection and Warning System across Britain’s network.
At 8:22 a.m. on 2 December 1999, a crowded Sydney-bound CityRail interurban electric train collided with the rear of the stationary Indian Pacific transcontinental train on a curve east of Glenbrook station, in the lower Blue Mountains of New South Wales, Australia. Seven people on the interurban were killed and 51 were taken to hospital. The collision was not the product of a broken signal or a failed brake but of the rules and communications that governed how trains were allowed to move past signals that were already showing red — an operational failure that a judicial Special Commission of Inquiry, headed by Acting Justice Peter McInerney, traced to unsafe “pass-the-signal” procedures, poor communication between drivers and signallers, and an unreliable lineside telephone.
The sequence began with the Indian Pacific, the long Perth-to-Sydney passenger train, being authorised to pass a signal at danger at Glenbrook under the rules then in force. It proceeded and stopped at the next signal, which was also red. Its driver climbed down to use the trackside signal telephone to obtain authority to pass that second signal, but believed the phone was defective — a component was missing — and a delay of several minutes followed while the heavy train sat on the main line. Behind it, the CityRail V set interurban was itself authorised past the same red signal at Glenbrook and restarted up the grade. Required by the rule to proceed with extreme caution and to be able to stop short of any obstruction, the interurban instead caught up to the stationary Indian Pacific on the curve and struck its rear wagon.
The McInerney Special Commission of Inquiry — a judicial inquiry established under the New South Wales Special Commissions of Inquiry Act, not a transport-safety board issuing a “probable cause” — examined the disaster in an interim report (June 2000) and a final report presented on 11 April 2001. It declined to reduce the catastrophe to the interurban driver’s single error. Instead it found a web of contributing failures: a permissive signalling rule that routinely sent trains past red signals into territory that might be occupied; inadequate and ambiguous communication between drivers and signallers; the absence of a working, reliable means for a stopped driver to reach the signaller quickly; and shortfalls in training and procedure across the railway. The Commission made dozens of recommendations spanning rules, communications, training, and drug and alcohol testing, the great majority of which the State Government accepted.
The Glenbrook collision, coming after the 1977 Granville disaster and feeding directly into the same Commissioner’s later inquiry into the 2003 Waterfall crash, became a turning point in New South Wales rail safety, helping drive the overhaul of signalling rules and the creation of an independent rail safety regulator and investigator for the state.