Original subtitles

What's that?

When crisis strikes...

What is it, the engines?

What is it, the engines?

...pilots must make life and death choices.

Which one is it?

It's the left.

It's the left.

It's the right one.

Did he say the right one?

But sometimes, accident investigators find

evidence of baffling decisions.

evidence of baffling decisions.

Turn it off up there.

Auto throttle.

Pull here.

It's off.

Those guys had no idea what was going on.

Those guys had no idea what was going on.

...with deadly consequences.

The input of the first officer...

Pull down.

...was the exact wrong thing to do.

...was the exact wrong thing to do.

Three flights end in tragedy.

Don't tell me he tried to do that in the air.

Don't tell me he tried to do that in the air.

When pilots add to the problems they're facing.

It's not correcting.

Oh, no.

Oh, no.

Don't tell me.

Ladies and gentlemen, we are starting our approach.

Ladies and gentlemen, we are starting our approach.

We lost both engines.

Put the mask over your nose.

- Emergency descend. - Mayday.

Mayday.

Mayday.

Brace for impact.

Look at the last one.

It's gonna crash.

It's gonna crash.

It's a busy night at Heathrow Airport in London.

The crew of British Midland Flight 92

The crew of British Midland Flight 92

completes the final takeoff preparations for a short flight

to Belfast.

to Belfast.

Why don't you let them know we're ready to go?

Will do.

Will do.

Hi, ladies and gentlemen.

Welcome aboard.

We're just finishing up our final checks,

but we'll have you on your way in just a few minutes.

but we'll have you on your way in just a few minutes.

There are 118 passengers on the Boeing 737.

One of them is Nigel Baldwin.

One of them is Nigel Baldwin.

I was excited, just had an exciting weekend,

making the final arrangements for our wedding,

and I just settled back, like everybody else.

and I just settled back, like everybody else.

Midland 92, you're cleared for takeoff.

Captain Kevin Hunt flew the plane in from Belfast.

Captain Kevin Hunt flew the plane in from Belfast.

He's a 23-year veteran, who's logged

more than 750 hours in 737s.

more than 750 hours in 737s.

Thrust set.

First Officer, David McClelland...

Here we go.

...takes the controls for the return trip.

...takes the controls for the return trip.

He's been a pilot for six years.

Midland 92 cleared to flight level 350.

Midland 92 cleared to flight level 350.

Flight level 350, Midland 92.

Flight level 350, Midland 92.

Could I have a coffee too, please?

Could I have a coffee too, please?

The plane has only been in the air for 10 minutes.

What's that?

What's that?

I just knew there was something not quite right.

Whoa.

You smell that?

You smell that?

Is that smoke?

What is it, the engines?

We can hear it.

It was sort of a humming vibration.

It was sort of a humming vibration.

It's a fire, Kevin.

Which one is it?

Which one is it?

It's the left.

It's the right one.

The pilots need to act quickly.

OK, throttle it back.

OK, throttle it back.

Throttling back.

They try to stabilize the problem engine

They try to stabilize the problem engine

by reducing power on that side.

It seems to be running all right now.

It seems to be running all right now.

But we've still got the smoke.

This is Midland 92.

We've got an engine fire.

We need to divert to East Midlands.

We need to divert to East Midlands.

Understood.

Cleared for descent to 10,000 feet.

Shutting down the engine

Shutting down the engine

will prevent the fire from spreading.

Shutting down now.

The pilots turn toward nearby East Midlands Airport.

The pilots turn toward nearby East Midlands Airport.

Landing lights.

Landing lights.

On.

Flaps one, please.

They will have to make the landing

with only one engine.

with only one engine.

Power, please.

We're losing another engine.

We're losing another engine.

Five Bella number 1.

Five Bella number 1.

Try reloading the other one.

It's not... I can't seem to...

I remember the flames coming over the top of the engine,

and they were just sort of licking around the sides.

and they were just sort of licking around the sides.

I have to stretch the glide.

The captain lifts the nose in a last-ditch attempt

The captain lifts the nose in a last-ditch attempt

to reach the runway.

Damn it!

Damn it!

Pull up.

Close tank.

Close tank.

Close tank.

There were people screaming.

There were people crying, having fear for their lives.

There were people crying, having fear for their lives.

Pull up.

Brace!

Brace!

British Midland Flight 92

slams into an embankment a half mile short at the airport.

slams into an embankment a half mile short at the airport.

87 of the 126 people aboard survive.

87 of the 126 people aboard survive.

Emergency crews are on the scene within minutes.

Many are injured, including First Officer McClelland.

Captain Hunt has a broken spine.

Captain Hunt has a broken spine.

As rescue efforts continue, a team

As rescue efforts continue, a team

from Britain's Air Accidents Investigation branch

arrives on the scene.

arrives on the scene.

I've got close enough

to see the runway lights.

I think all of the team, their first impression

I think all of the team, their first impression

was that this airplane seems to have had

some problem with engine power.

some problem with engine power.

Investigators searched the area for even the smallest

fragments of engine debris, anything

fragments of engine debris, anything

that might help explain the cause of the disaster.

The pilots are too badly injured to be interviewed.

Investigators speak to the controller who assisted them.

Investigators speak to the controller who assisted them.

They said they had an engine fire.

This is Midland 92.

We've got an engine fire.

We need to divert to East Midlands.

We need to divert to East Midlands.

Understood.

Cleared for descent to 10,000 feet.

The 737 can be flown with only one working engine,

The 737 can be flown with only one working engine,

so why was the plane unable to reach the runway?

Investigators examine the recovered engines.

Investigators examine the recovered engines.

What they find surprises them.

Both engines failed.

Both engines showed pretty low-speed rotation

Both engines showed pretty low-speed rotation

at the impact, so it was a question of sorting

out why they were both there.

out why they were both there.

Dual engine failure is almost unheard of.

Dual engine failure is almost unheard of.

How did it happen?

Flight 92's voice and flight data recorders

Flight 92's voice and flight data recorders

might provide some answers.

So the right engine stops here,

So the right engine stops here,

and the left gives out more than 15 minutes later here.

and the left gives out more than 15 minutes later here.

Whatever the two problems were, they

didn't happen at the same time.

Let's hear it.

Let's hear it.

The team hopes the cockpit voice recorder

will reveal what went wrong.

That's an engine vibration.

It can't be anything else.

Let's see what you do about that.

Let's see what you do about that.

Whoa.

What is it the engines?

We could hear the banging

of this and the shaking.

of this and the shaking.

And it's obvious that the crew were

pretty rattled by this as well.

Which one is it?

Which one is it?

It's the left.

It's the right one.

Did he say the right one?

It was a little bit of a mystery

It was a little bit of a mystery

that the voice recorder showed them

apparently opting for the right engine

apparently opting for the right engine

as being where the problem was.

I can't see anything wrong with the right engine

at this point.

at this point.

Were you suspecting

that the right engine had been shut down,

but it was the left engine that had the problem.

but it was the left engine that had the problem.

It was vital that we got the crew's version of events.

The captain is still recovering

The captain is still recovering

from his severe injuries, so investigators

interview the first officer.

It started with the vibrations in the right engine.

It started with the vibrations in the right engine.

When the vibrations were really fierce,

When the vibrations were really fierce,

Captain Hunt suggested that we throttle back.

Captain Hunt suggested that we throttle back.

Throttling back.

We throttle back the right engine,

and the vibration stopped.

and the vibration stopped.

Seems to be running all right now.

The vibration and the noise went away,

The vibration and the noise went away,

so it would have indicated to them

we've done the right thing.

The team is forced to consider

an extraordinary theory.

This could be two unrelated engine failures, fire

This could be two unrelated engine failures, fire

on the left side and an entirely different

one on the right side.

one on the right side.

What led to two separate failures?

Investigators hope engine fragments

recovered near the crash site will provide an explanation.

recovered near the crash site will provide an explanation.

One piece stands out.

Gotcha.

A section of fan blade shows signs of metal fatigue.

A section of fan blade shows signs of metal fatigue.

Even a single broken blade can cause a dangerous reaction.

Even a single broken blade can cause a dangerous reaction.

This finding could explain how the engine failures began.

This finding could explain how the engine failures began.

It would have been a lot of physical vibration.

The passengers reported that it was

The passengers reported that it was

like the sound of in a tumble dryer of rocks and stuff

being thrown around.

being thrown around.

It would have really been quite violent.

A metallurgical examination

reveals which engine the damaged blade came from.

reveals which engine the damaged blade came from.

Blade 17, left engine.

The blade that broke first

The blade that broke first

and then triggered the vibration came from the left engine.

Investigators face a compelling question.

Investigators face a compelling question.

If the vibrations were coming from the left engine,

why did the pilot shut down the right one?

why did the pilot shut down the right one?

It's hard to believe they would

shut down the wrong engine.

There was a lot of skepticism

There was a lot of skepticism

from the operations inspectors, the pilots on the team

because here, we have a very experienced,

because here, we have a very experienced,

well-qualified crew.

Which one is it?

Which one is it?

It's the left.

Ah, it's the right one.

And it's very, very

difficult to accept that such a basic mistake could be made.

When their left engine began vibrating,

the pilots of Flight 92 mistakenly

the pilots of Flight 92 mistakenly

shut down the right engine.

It's the left.

Ah, it's the right one.

Ah, it's the right one.

Throttle it back.

I don't think we'll ever know why he changed

I don't think we'll ever know why he changed

his mind, the diagnosis.

Once the left engine caught fire,

Once the left engine caught fire,

investigators believe that mistake ended

any hope of a safe landing.

any hope of a safe landing.

But a major question remains, why did the vibration suddenly

stop in the damaged left engine when the crew

stop in the damaged left engine when the crew

shut down the right one?

They reduced the power on the right engine,

They reduced the power on the right engine,

but somehow, the left engine settles down.

The team analyzes every action the pilots made.

The team analyzes every action the pilots made.

When the crisis hit, they reduced

power to the right engine.

Seems to be running all right now.

Seems to be running all right now.

The engine problems appear to stop.

I'm in no doubt that that was, by far, the most dominant cue

I'm in no doubt that that was, by far, the most dominant cue

for them that they had done the right thing,

and the problem lay in the right engine.

and the problem lay in the right engine.

But the flight data shows that just seconds

before reducing power, the first officer

made one other adjustment.

made one other adjustment.

That's it.

Of course.

He had to disconnect the auto throttle.

Throttle it back.

Throttle it back.

To reduce power on the right-hand side,

the pilot must first switch off the auto throttle.

the pilot must first switch off the auto throttle.

Pull the throttle off.

Switching to manual has an unforeseen consequence.

Switching to manual has an unforeseen consequence.

It reduces power to the left engine

and a temporary, but dramatic improvement in performance.

and a temporary, but dramatic improvement in performance.

It was damaged, but it was reasonably happy operating

It was damaged, but it was reasonably happy operating

at a low power setting, which is all

it needed because they were constantly descending

it needed because they were constantly descending

towards the airfield.

With its right engine shut down,

the plane flew for nearly 17 minutes on only the damaged

the plane flew for nearly 17 minutes on only the damaged

left engine, but when the crew increased power...

Power, please.

...part of the broken number 17 blade

...part of the broken number 17 blade

was sucked into the left engine causing a catastrophic failure.

Investigators conclude that the pilot's

incorrect assessment triggered a chain

incorrect assessment triggered a chain

of events that led to disaster.

It was probably the killer blow because what that meant

It was probably the killer blow because what that meant

was that they felt that what they had done,

which was to close the right-hand engine down, was

the correct thing to have done.

When pilots compound problems in flight,

they may have only seconds to correct the error

they may have only seconds to correct the error

and save their aircraft.

Congonhas Airport in Sao Paulo, Brazil.

89 passengers are getting ready for TAM Airlines Flight 402

89 passengers are getting ready for TAM Airlines Flight 402

to Rio de Janeiro.

One of TAM's most experienced pilots is in command.

One of TAM's most experienced pilots is in command.

Jose Antonio Moreno has almost 6,500 flying hours.

Jose Antonio Moreno has almost 6,500 flying hours.

Before we start, checklist.

Yes, captain.

Already done.

Good.

Good.

Go ahead and call the tower so we

can get these engines started.

You got it.

First Officer Ricardo Luis Gomez is less experienced.

First Officer Ricardo Luis Gomez is less experienced.

He qualified to fly the Fokker 100 only a week ago.

Sao Paolo, TAM 402, we're ready to go

Sao Paolo, TAM 402, we're ready to go

and requesting engine start.

TAM 402, you're clear to start.

TAM 402, you're clear to start.

Fire them up.

Starting number 1.

Starting number 1.

Starting engine 2.

TAM 402, you are cleared for takeoff.

Runway 17, right.

Runway 17, right.

Here we go.

Take off thrust.

V1, rotate.

V1, rotate.

Suddenly, TAM flight 402 is in trouble.

Suddenly, TAM flight 402 is in trouble.

No. No.

No. No.

Less than 50 feet in the air,

the plane rolls dangerously to the right.

the plane rolls dangerously to the right.

The captain struggles to level the plane,

The captain struggles to level the plane,

but now, there's a new problem.

Airspeed is dropping.

Airspeed is dropping.

It has to be an absolutely sick feeling for

that flight crew at that point.

that flight crew at that point.

Pull up.

25 seconds after takeoff...

Terrain.

Terrain.

Terrain.

Terrain.

...TAM Flight 402 crashes

...TAM Flight 402 crashes

into a Sao Paulo neighborhood.

The crash kills all 95 people on board the plane.

The crash kills all 95 people on board the plane.

On the ground, another four are dead.

Many more are injured.

Many more are injured.

A team of investigators from the Brazilian Air Force

arrives at the scene.

Major Carlos da Conceicao is in charge.

Major Carlos da Conceicao is in charge.

When I got there, it was really

a scene of total devastation.

a scene of total devastation.

The plane took down everything in its path.

The plane took down everything in its path.

It was like a war zone.

What went wrong when Flight 402 took off?

What went wrong when Flight 402 took off?

Here, it's from the cockpit.

Piece by piece, they recover

the aircraft's components to begin the search for answers.

the aircraft's components to begin the search for answers.

We know that the aircraft

departed controlled flight at a very, very low altitude.

departed controlled flight at a very, very low altitude.

The first culprit in that type of instance

would be loss of thrust.

would be loss of thrust.

Investigators scrutinize

the flight data and spot something

odd about the thrust settings.

odd about the thrust settings.

The power is all over the place.

The thrust was increasing

and decreasing, increasing and decreasing,

and then finally, full thrust.

and then finally, full thrust.

Was very confusing.

Why would this happen.

Investigators consider a connection

Investigators consider a connection

with another piece of evidence.

OK, so you saw something moving

at the back of the engine.

at the back of the engine.

A witness saw one of the plane's thrust reversers

open just before the crash.

Can you bring up all the data on the thrust reversers?

Thrust reversers deploy on landing

Thrust reversers deploy on landing

to help slow the aircraft.

They are never used in the air.

The reverser is an aerodynamic brake,

which is used on landing.

Why would it open during takeoff?

Why would it open during takeoff?

There.

The flight data reveals that after takeoff,

The flight data reveals that after takeoff,

the right thrust reverser opened and closed

twice, then remained deployed.

twice, then remained deployed.

This shouldn't even be possible.

This shouldn't even be possible.

I was amazed, because that's just not supposed to happen.

Thrust reverser systems

Thrust reverser systems

are designed to prevent an accidental deployment

in flight.

Investigators test the reversers,

looking for flaws, which might explain

why one opened during flight.

why one opened during flight.

The movement of the thrust reversers,

The movement of the thrust reversers,

it was a big mystery.

They discover the problem,

They discover the problem,

a faulty landing sensor.

It intermittently signaled the reverser to open and close.

It intermittently signaled the reverser to open and close.

If there is an uncommanded thrust reverser deployment,

the system would automatically retard

the system would automatically retard

the thrust level back to idle.

the thrust level back to idle.

But the aircraft should still

be able to climb safely with just one engine,

so why couldn't Flight 402?

so why couldn't Flight 402?

OK.

Go ahead, please.

Go ahead, please.

Investigators listen to the audio captured

by the cockpit voice recorder.

RICARDO LUIS GOMEZ No.

No. No No. No

No. No No. No

He sounds like he's fumbling with something?

It's locked.

What's locked?

What's locked?

JOSE ANTONIO MORENO

Turn it off up there. Auto throttle.

Pull here.

RICARDO LUIS GOMEZ (ON RECORDING): It's off.

RICARDO LUIS GOMEZ (ON RECORDING): It's off.

It sounds like the crew thought the problem

was the auto throttle.

was the auto throttle.

The pilots are focused on the auto throttle.

They never discussed the reverser.

They never discussed the reverser.

Turn it off up there.

Here too.

It's off!

It's off!

And there was no alarm to warn them

And there was no alarm to warn them

that the reverser deployed.

RICARDO LUIS GOMEZ No.

No. No.

No.

No.

Oh, God.

Those guys had no idea what was going on.

It's now clear to investigators

It's now clear to investigators

that the crew was confused, but they still need to determine

why the pilots reacted as they did

why the pilots reacted as they did

in those critical last seconds.

You want to get clear what, in fact, happened so

You want to get clear what, in fact, happened so

that this won't happen again.

To obtain a more detailed picture,

To obtain a more detailed picture,

the team combines the flight data and the cockpit

voice recording to create a real-time animation

voice recording to create a real-time animation

of the flight.

Let's see what we got.

Take up speed was 127 knots.

It reveals why the crew acted the way they did

It reveals why the crew acted the way they did

when the reverser was deployed.

RICARDO LUIS GOMEZ (ON RECORDING): It's locked.

Hold it.

Hold it.

He must be reacting to the movement of the thrust lever.

RICARDO LUIS GOMEZ No.

No. No.

No. No.

The automation just moved it to idle,

The automation just moved it to idle,

just like it's supposed to.

The sudden loss of thrust in the right engine

indicates that the failsafe system did activate

indicates that the failsafe system did activate

when the reverser deployed.

Turn it off up there.

Auto throttle.

Pull here.

It's off!

It's off!

But the pilots misinterpret

the lever's movement.

the lever's movement.

Oh, no.

Don't tell me.

Don't tell me.

They think the throttle

is malfunctioning and reducing thrust to the right engine.

I think the first officer is deliberately putting

the engine back to full power.

the engine back to full power.

When the thrust reverser accidentally deploys

in the Fokker 100, a cable automatically

in the Fokker 100, a cable automatically

pulls back the throttle to reduce engine power.

pulls back the throttle to reduce engine power.

Pilots shouldn't be able to override it,

yet the first officer managed to do exactly that.

yet the first officer managed to do exactly that.

Terrain.

Terrain.

Pull up.

Pull up.

Terrain.

Terrain.

The levers are here.

It was very important to, in fact,

examine the cable what condition was it in.

examine the cable what condition was it in.

This connects to the faulty reverser.

Investigators discover that the cables separated

Investigators discover that the cables separated

at a key connection point.

That connector should be able to withstand the force

that the pilots exert.

that the pilots exert.

Only this time, it didn't.

Three times, the safety system pulls back the power,

Three times, the safety system pulls back the power,

and three times, the first officer puts

the engines back to full power.

the engines back to full power.

Investigators conclude that when the thrust lever

snapped to idle for the first time,

snapped to idle for the first time,

the first officer used all his strength to move it forward.

The object is to get the airplane as high

The object is to get the airplane as high

and fast as you possibly can.

Given the information that this flight crew had,

Given the information that this flight crew had,

I would venture to say that 99% of all flight crews

would have reacted exactly the same way.

would have reacted exactly the same way.

With the throttle held forward,

the reverser opened again, triggering the failsafe cable,

the reverser opened again, triggering the failsafe cable,

but the first officer continued pushing.

That combined force was stronger than the manufacturer

anticipated.

The cable separated.

The cable separated.

Had ended up with the thrust reverser fully open

and with full thrust on that engine where

and with full thrust on that engine where

the thrust reversers were open.

With one engine at full forward power

and the other in full reverse, the plane rolled

and the other in full reverse, the plane rolled

into an uncontrollable dive.

Terrain. Terrain.

Pull up.

Pull up.

Once he put the engine back to full power,

Once he put the engine back to full power,

they didn't stand a chance.

The crew's actions were central to the fatal crash

of TAM 402, but why did an automated

of TAM 402, but why did an automated

system designed to help keep an aircraft safe,

so confuse the crew?

so confuse the crew?

The thought came, why?

How did this happen?

- How did the crew... - No.

No. No.

No. No.

No. No.

...not understand what was happening to them?

Let's see how much time these guys spent training for this.

Investigators need to find out if the TAM pilots knew

Investigators need to find out if the TAM pilots knew

what to do if the Fokker 100's thrust reversers deployed

accidentally.

accidentally.

We found out that TAM had consulted with Fokker

to find out whether there was any need

to find out whether there was any need

to train for a reverser deployment during takeoff.

A failure so rare, they decided not to train for it.

A failure so rare, they decided not to train for it.

Fokker formally responded, but the probability

Fokker formally responded, but the probability

that the reverser would open during takeoff was very small,

and this training was not necessary.

and this training was not necessary.

Turn it off up there.

Here too.

It's off!

It's off!

It's off!

Confused and untrained,

the first officer restored the power

he wanted for the takeoff.

he wanted for the takeoff.

Unfortunately, they

Unfortunately, they

didn't have enough information to make the right decisions

at the right time.

After the crash, TAM Airlines added new training

After the crash, TAM Airlines added new training

to instruct its pilots how to respond if a reverser deploys

to instruct its pilots how to respond if a reverser deploys

during takeoff.

The cockpit is a complex network of integrated systems.

The cockpit is a complex network of integrated systems.

When flight crews confront one failure,

it takes just one bad decision to create another far more

it takes just one bad decision to create another far more

serious problem.

AirAsia, Flight 8501 cruises high above the sea,

AirAsia, Flight 8501 cruises high above the sea,

north of Indonesia.

Captain Irianto is in command of the Airbus A320.

Captain Irianto is in command of the Airbus A320.

He has logged more than 20,000 flying hours.

His first officer is Rahmi Emmanuel Purcell.

His first officer is Rahmi Emmanuel Purcell.

He's amassed about 2,000 flying hours, much of it

on the Airbus.

on the Airbus.

It was the first officer that

was manipulating the controls.

The captain was in command of the flight,

The captain was in command of the flight,

but was performing the duties of the pilot monitoring,

or the non-flying pilot.

or the non-flying pilot.

Today's flight originated

in the Indonesian city of Surabaya.

in the Indonesian city of Surabaya.

The route heads across the Java Sea to Singapore.

Looks like weather ahead.

Looks like weather ahead.

I'm going to radio for a higher cruise.

Get around that weather.

Good idea.

Good idea.

But before the captain can do that, the flight

computer sends a fault warning

computer sends a fault warning

ECAM actions.

The ECAM system monitors

the plane's functions and lists actions

to be taken by the crew.

to be taken by the crew.

FAC 1 off and on.

FAC 1 off and on.

FAC 2 off and on.

Resetting the aircrafts

to flight augmentation computers,

to flight augmentation computers,

or FACs, addresses the fault...

Warning cleared.

...and silences the warnings.

A few minutes later...

Same.

FAC 1 off and on.

After the crew addresses the second fault...

After the crew addresses the second fault...

AirAsia 8501, you are cleared 2340.

AirAsia 8501, you are cleared 2340.

...Jakarta air traffic control

clears the flight to climb.

The controller waits for confirmation,

The controller waits for confirmation,

but the pilots are distracted.

Here we go again.

ECAM actions.

ECAM actions.

PAC 1 off and on.

Very annoying and very time consuming to deal

Very annoying and very time consuming to deal

with this recurring problem.

Enough of this.

ECAM actions.

In Jakarta, the controller is

trying to contact the flight.

AirAsia 8501, do you read me?

AirAsia 8501, do you read me?

Please acknowledge.

But in the cockpit, the fault warnings

have increased dramatically.

have increased dramatically.

AirAsia 8501, do you read me?

Please acknowledge.

The displays indicate the plane

The displays indicate the plane

is now rolling sharply left.

Level.

OK, level.

Level.

- RAHMI EMMANUEL - I'm trying.

It's not responding.

AirAsia 8501, please confirm.

AirAsia 8501, please confirm.

You are climbing to flight level 340.

You are climbing to flight level 340.

The plane is now climbing higher and higher.

Then suddenly, it falls.

Altitude!

I see it.

I see it.

The rate of descent here was very, very high.

The rate of descent here was very, very high.

Flight 8501 plummets from the sky,

speeding toward the sea below.

AirAsia Flight 8501 is falling fast.

Pull.

Pull.

The pilots are helpless.

The plane vanishes from radar and plunges into the Java Sea.

The plane vanishes from radar and plunges into the Java Sea.

The loss of AirAsia 8501

The loss of AirAsia 8501

was a classic case of a flight degenerating

from mundane, normal cruise conditions

from mundane, normal cruise conditions

to the loss of the aircraft in a span of just 20 minutes.

Rescue teams searched the area,

Rescue teams searched the area,

but of the 162 passengers and crew,

there are no survivors and only a few

there are no survivors and only a few

pieces of floating debris.

An international team of air safety investigators

An international team of air safety investigators

flies to Jakarta to join local experts.

They need to find out why a highly sophisticated

airliner, flying at cruising altitude suddenly

airliner, flying at cruising altitude suddenly

fell from the sky.

We had a lot of little pieces everywhere.

My first reaction was, it's not going to be easy.

My first reaction was, it's not going to be easy.

Two weeks after the crash, the plane's black boxes

Two weeks after the crash, the plane's black boxes

are recovered from the sea.

Investigators analyze the cockpit voice recording.

CAPTAIN IRIANTO (ON RECORDING): Jakarta air traffic

CAPTAIN IRIANTO (ON RECORDING): Jakarta air traffic

control, AirAsia 8501 request climb to 38,000

to clear storm clouds.

to clear storm clouds.

Almost immediately, they discover something.

Almost immediately, they discover something.

RAHMI EMMANUEL PURCELL (ON RECORDING): ECAM actions.

CAPTAIN IRIANTO (ON RECORDING): FAC 1 off and on.

CAPTAIN IRIANTO (ON RECORDING): FAC 1 off and on.

FAC 2 off and on.

Warning cleared.

Warning cleared.

They were dealing with some kind of warning.

Play recording.

CAPTAIN IRIANTO (ON RECORDING): ECAM actions, same.

CAPTAIN IRIANTO (ON RECORDING): ECAM actions, same.

OK, the warning came back.

They were getting continual fault warnings through what's

They were getting continual fault warnings through what's

called an ECAM system, electronic central aircraft

monitoring system.

CAPTAIN IRIANTO (ON RECORDING): Here we go again.

At this point, the crew's behavior was standard.

At this point, the crew's behavior was standard.

They were communicating on what checklist to apply.

There it is again.

There it is again.

RAHMI EMMANUEL PURCELL (ON RECORDING): ECAM actions.

Then the recording reveals something unexpected.

Then the recording reveals something unexpected.

No, I've got a better idea.

After a fourth fault, the captain appears to take

After a fourth fault, the captain appears to take

a different course of action.

Hold recording.

Now, the autopilot has disengaged.

Now, the autopilot has disengaged.

An unexpected disengagement of the auto

throttle and autothrust system results

throttle and autothrust system results

in a pretty loud warning.

RAHMI EMMANUEL PURCELL (ON RECORDING): What was that?

OK, let's see what we have.

RAHMI EMMANUEL PURCELL (ON RECORDING): Master caution.

RAHMI EMMANUEL PURCELL (ON RECORDING): Master caution.

Why?

Checking.

Then a more serious alarm sounds.

CAPTAIN IRIANTO (ON RECORDING): Level.

Stall warning.

CAPTAIN IRIANTO (ON RECORDING): Pull.

Slowly.

Slowly.

RAHMI EMMANUEL PURCELL (ON RECORDING): What's going on?

CAPTAIN IRIANTO (ON RECORDING): Pull!

What caused this technically sophisticated

aircraft to stall?

The autopilot disconnects, the aircraft stalls, they struggle

The autopilot disconnects, the aircraft stalls, they struggle

to recover, it makes no sense.

to recover, it makes no sense.

Investigators look for clues in the plane's

maintenance records.

maintenance records.

They quickly find one.

They quickly find one.

There had been an issue with the rudder travel limit unit,

or RTLU.

The RTLU prevents the rudder from deflecting too far

in either direction mid-flight.

in either direction mid-flight.

Records reveal that it had been malfunctioning

for almost a year.

23 reports of the exact same failure.

The RTLU failures on this particular airframe

The RTLU failures on this particular airframe

had become increasingly frequent.

After each failure, maintenance

After each failure, maintenance

workers reset the RTLU...

They just kept resetting it and then

They just kept resetting it and then

putting it back in service.

...and failed to find a more permanent fix.

They were returning the airplane

They were returning the airplane

to service after reset, and from a legal standpoint,

it did clear the problem, but obvious that whatever the fault

it did clear the problem, but obvious that whatever the fault

was they hadn't found it because the problem

continued to reoccur.

The aircraft could operate normally,

The aircraft could operate normally,

despite the warnings, but on the night of the crash, It didn't.

Why?

Why?

Investigators hope to find the answer

on the flight data recorder.

on the flight data recorder.

So here's the first warning.

It clearly was the RTLU.

They do the fix, simply resetting the entire system.

They do the fix, simply resetting the entire system.

Two more times, the RTLU warning goes off,

Two more times, the RTLU warning goes off,

and each time, they did the right thing.

Then it went off on a fourth time,

Then it went off on a fourth time,

then suddenly, there was a glitch.

Investigators believe that glitch caused

Investigators believe that glitch caused

the autopilot to disconnect and put the plane

into a dangerous left bank.

The single event of autopilot, auto throttle disengagement

The single event of autopilot, auto throttle disengagement

sends the investigators in two different directions...

sends the investigators in two different directions...

one, what caused it, two, how did the crew handle it.

As investigators struggle

As investigators struggle

to answer those questions...

Hello, NTSC.

Hello, NTSC.

...they get a tantalizing new lead.

Wait, wait, slow down.

What happened?

Investigators receive an unexpected call,

Investigators receive an unexpected call,

offering new information about the captain of AirAsia 8501.

Start from the beginning.

Where was he?

Three days before the accident,

Three days before the accident,

this same captain was about to fly

from Indonesia to Kuala Lumpur, when

from Indonesia to Kuala Lumpur, when

he had an RTLU malfunction.

He asked for an engineer to come into the cockpit

and try to fix that.

and try to fix that.

RTLU problem again?

Yeah, it just keeps coming back.

The maintenance engineer rebooted the system.

The maintenance engineer rebooted the system.

There.

There.

...but the problem returned.

I've got an idea.

I've got an idea.

He then pulled the circuit

breakers for the main computer.

breakers for the main computer.

Maintenance on the ground

has a very specific list of circuit breakers that says you

has a very specific list of circuit breakers that says you

can utilize pulling these circuit breakers to reset

can utilize pulling these circuit breakers to reset

computers within the airplane.

The captain watched as the problem

appeared to be resolved.

appeared to be resolved.

Problem solved.

And can I do the same thing if it happens again?

And can I do the same thing if it happens again?

Yeah, just do what the ECAM tells you to do.

Yeah, just do what the ECAM tells you to do.

Don't tell me he tried to do that in the air?

Investigators think they now know what the captain

Investigators think they now know what the captain

did to cause the crisis.

Begins simulation.

Begins simulation.

To see if they're right,

they simulate the events in the cockpit.

OK, so let's start with the RTLU warnings, OK?

OK, so let's start with the RTLU warnings, OK?

FAC 1, off.

FAC 2, off.

Good.

Enough of this.

After a fourth alarm.

After a fourth alarm.

ECAM actions?

No.

I've got a better idea.

I've got a better idea.

Investigators believe the captain pulled

two critical circuit breakers.

Captain pulls the circuit breaker 1.

The result is immediate.

And there goes the autopilot disconnect warning.

And there goes the autopilot disconnect warning.

This had to be what he did.

He was, perhaps, copying what he'd seen the ground engineer

He was, perhaps, copying what he'd seen the ground engineer

do, but of course, the consequences in flight,

disabling critical systems are quite different.

disabling critical systems are quite different.

His fix for a minor fault created a new problem.

His fix for a minor fault created a new problem.

Pulling the circuit breaker disables

the autopilot, which sends the plane into a 54-degree roll.

the autopilot, which sends the plane into a 54-degree roll.

The first officer doesn't notice the plane

is banking until the captain sits down again.

Oh, my God.

Oh, my God.

Oh.

The co-pilot's movement

of the stick to its extreme rightmost

of the stick to its extreme rightmost

position resulted in a very violent roll to the right.

The FDR data shows how extreme the plane's movements

The FDR data shows how extreme the plane's movements

were.

So the plane rolled 54 degrees left,

So the plane rolled 54 degrees left,

and he pulled back almost level in just 2 seconds.

and he pulled back almost level in just 2 seconds.

That would scramble anybody's gyros.

Maybe that was the confusion.

Maybe that was the confusion.

As soon as the first officer had leveled the aircraft,

the fluid in his ear canals keeps spinning to the right.

the fluid in his ear canals keeps spinning to the right.

The aircraft is level, but there's

a very strong illusion from the ears

that you're turning to the right.

that you're turning to the right.

And then he pulls it as hard as he can,

and the plane starts climbing.

and the plane starts climbing.

This is a massive input.

The airplane would pitch up very quickly.

The airplane would pitch up very quickly.

What's going on?

He was completely baffled.

His vertigo may have led him to believe that the aircraft

His vertigo may have led him to believe that the aircraft

was pitching down, so he's actually recovering

from an imaginary pitch down.

from an imaginary pitch down.

He was disoriented.

The plane stalls and begins to fall out of the sky.

The plane stalls and begins to fall out of the sky.

The captain attempts to regain control, but his efforts fail.

I think the crew had started to lose their spatial awareness

I think the crew had started to lose their spatial awareness

completely.

The first officer continues

pulling back on his side stick until the very end.

pulling back on his side stick until the very end.

The input of the first officer...

Pull down!

Pull down!

...was the exact wrong thing to do.

What's going on?

When a flight crew faces a failure mid-flight,

one bad decision can trigger bigger problems

one bad decision can trigger bigger problems

that lead to catastrophe.

No one's going to be able to reach up and grab

you and bring you safely back.

What it finally comes down to is how well that captain

What it finally comes down to is how well that captain

and first officer orchestrate what they have been taught,

with the situation that they have,

with the situation that they have,

to try to bring everybody back down to Earth safely.