Chatsworth — A Texting Engineer, a Red Run, Twenty-Five Dead

Summary

At about 4:22 p.m. Pacific time on Friday, 12 September 2008, westbound Metrolink commuter train 111 ran past a red signal at Control Point Topanga, near the Chatsworth district of Los Angeles, and continued onto a single-track section straight into the path of eastbound Union Pacific freight train LOF65-12. The two trains met head-on. Twenty-five people died, including the Metrolink engineer; about 102 passengers were taken to hospitals, with dozens critically hurt. It was the deadliest accident in Metrolink's history and, at the time, one of the worst US passenger-rail collisions in decades.

The investigation by the National Transportation Safety Board established the cause with unusual directness, because the engineer's actions in the final minute were recorded in the cellular network. The Metrolink engineer, 46-year-old Robert Sanchez — employed by the contractor that supplied Metrolink's train crews — had been exchanging text messages throughout his shift with a teenage railfan, and sent his last text at 4:22:01 p.m., roughly twenty-two seconds before impact. He did not observe and respond to the red stop signal at Control Point Topanga, did not slow, and never applied the brakes. The Union Pacific engineer applied emergency braking about two seconds before the collision, far too late to matter.

The NTSB's probable cause is stated plainly: "the failure of the Metrolink engineer to observe and appropriately respond to the red signal aspect at Control Point Topanga because he was engaged in prohibited use of a wireless device, specifically text messaging, that distracted him from his duties." Because the determining act was the operator's distraction and failure at the controls, the finding here is recorded as driver. The Board further found, as a contributing factor, the absence of a positive train control system that would have automatically stopped train 111 short of the red signal and prevented the collision.

The case became the catalyst for a national change in US railway safety law. Within weeks Congress passed the Rail Safety Improvement Act of 2008, mandating the installation of positive train control (PTC) on main lines carrying passengers and on key freight routes. A federal liability cap limited the aggregate recovery for all passenger claims to 200 million dollars, which a court had to apportion among the many victims.

Timeline

The Afternoon Run and the Phone

Metrolink train 111 was a routine Friday-afternoon commuter service, a diesel-hauled push-pull set carrying more than two hundred riders out of central Los Angeles toward the Ventura County suburbs. Its engineer, Robert Sanchez, was 46 and worked for the private contractor that Metrolink used to supply its train crews. He was, on the surface, an experienced operator on familiar territory. What the investigation would expose was that his attention that day was repeatedly elsewhere.

Sanchez was a railfan as well as a railroad employee, and he carried on a running text-message correspondence with a teenage enthusiast. The phone records, recovered and timestamped against the train's movement, painted a damning picture of the shift: he had sent 45 text messages while operating a train that morning, and he resumed the exchange in the afternoon. This was not an isolated lapse. Metrolink's rules forbade the use of personal wireless devices while operating a train, and Sanchez had been warned by supervisors on more than one occasion about using a cellphone in the cab. The prohibition existed precisely because the railroad understood that an engineer's eyes and mind had to be on the signals and the road ahead.

The line west of Chatsworth narrowed to single track, the arrangement that makes head-on meets possible and that signalling is designed to prevent. Trains in opposite directions share the same rail and are kept apart by the wayside signals and the dispatcher's authorities; a red aspect at a control point is an absolute instruction to stop before fouling the single-track section. On the afternoon of 12 September that instruction was waiting for train 111 at Control Point Topanga, and the only thing standing between the commuters and an oncoming freight was the engineer reading and obeying it.

The Red at Control Point Topanga

In the final minute Sanchez was typing. His last outgoing text — a message about meeting fellow railfans later — was sent at 4:22:01 p.m., about twenty-two seconds before the collision. In those seconds the train approached and passed the red signal at Control Point Topanga. There was no reduction in speed, no brake application, nothing that the data recorders would have logged from an engineer who had seen the signal and reacted. Train 111 simply ran through the stop indication and onto the single track at speed, around 42 mph.

Coming the other way on that same single track was Union Pacific freight LOF65-12, a heavy train led by locomotives. Its engineer caught sight of the oncoming passenger train at the last possible instant and threw the brakes into emergency about two seconds before impact, but a loaded freight cannot stop in two seconds and the closing geometry left no room. The two trains met head-on. The force drove the lead Metrolink locomotive back into the first passenger car; the freight's locomotives and a number of its cars derailed. The passenger train, full at the end of the working week, took the brunt. Twenty-five people were killed, Sanchez among them, and roughly 102 were transported to hospitals, with dozens in critical condition.

The mechanism, in operational terms, was a signal passed at danger of the most consequential kind: not a complex misreading of a confusing gantry, but the straightforward failure of a distracted engineer to look at and obey an unambiguous red protecting single-track territory. Everything else about the railroad that afternoon functioned as designed. The signal displayed correctly. The freight was where the dispatcher's authority placed it. The single line was protected exactly as the rules intended. The protection failed at the one point the rules could not directly control — the engineer's attention.

The Five Factors

Aftermath

Chatsworth changed US railroad law faster than almost any accident before it. Just over a month after the collision, Congress passed the Rail Safety Improvement Act of 2008, which mandated the installation of positive train control across Class I freight main lines carrying hazardous materials and across rail corridors with regular passenger service, setting an initial deadline of 31 December 2015. PTC implementation proved expensive and complex and the deadline was later extended, but the mandate itself — born directly of this crash — drove the most significant change in American railway signalling safety in generations, and PTC was subsequently credited with preventing the kind of overspeed and signal-violation accidents that had recurred for decades.

The civil aftermath ran into a statutory wall. Federal law capped the aggregate liability for all passenger claims arising from a single rail accident at 200 million dollars, a sum manifestly inadequate to the scale of death and injury at Chatsworth; a federal judge was left to apportion the capped fund among the victims and families in what was described as a grim exercise in triage. The contractor that had employed Sanchez faced litigation and reputational damage. For the riders of train 111, the lasting consequence was not a courtroom verdict but a federal mandate: a national requirement that a machine be able to stop a train when the person at the controls does not.

Lessons

References

• Collision of Metrolink Train 111 With Union Pacific Train LOF65-12, Chatsworth, California, September 12, 2008 (RAR-10/01) National Transportation Safety Board
• NTSB investigation page DCA08MR009 National Transportation Safety Board
• NTSB Concludes "Egregious" Behavior of Connex Engineer Is Cause of Chatsworth Collision Metrolink (SCRRA)
• 2008 Chatsworth train collision Wikipedia (synthesis of the NTSB report and contemporary reporting)