← back to the reports
MY-009 McDonnell Douglas MD-11 · Swissair 1998

Swissair Flight 111 — An Attic Fire Outran the Crew Off Peggy’s Cove, 229 Dead

Killed
229
Aircraft
McDonnell Douglas MD-11
Operator
Swissair
Status
Design

Summary

On 2 September 1998, Swissair Flight 111, a McDonnell Douglas MD-11 registered HB-IWF, crashed into the Atlantic Ocean about five nautical miles southwest of Peggy's Cove, Nova Scotia, after an in-flight fire the crew could not control. All 229 people aboard — 215 passengers and 14 crew — were killed. The aircraft, an overnight service from New York's JFK to Geneva, had been airborne for under an hour when the pilots smelled an unusual odour; within minutes a suspected air-conditioning smell escalated to a fire above the cockpit ceiling, and roughly twenty minutes after the first odour the airplane struck the water at high speed and disintegrated. The recovery and reconstruction that followed became one of the most exhaustive in aviation history.

The Transportation Safety Board of Canada investigated under report A98H0003 and released its findings on 27 March 2003 after more than four years' work. The TSB concluded that a fire most likely began above the ceiling on the right side of the cockpit, near the rear wall, and that the most likely ignition was an electrical arcing event. Investigators recovered wire segments showing arcing damage, and a segment of arced cable belonging to the in-flight entertainment network (IFEN) — a supplemental system installed in the forward cabin — lay in the area where the fire most probably originated. The Board judged it likely that the lead arcing event involved one or more wires, which could have been IFEN wires, aircraft wires, or a combination; it could not declare the IFEN cable alone the sole initiating event.

Whatever the precise spark, the disaster turned on what happened next. The arc ignited flammable cover material on the aircraft's thermal-acoustic insulation blankets — material whose outer film was metallized polyethylene terephthalate, or MPET. That covering met the flammability test standard in force at the time, yet it could be ignited and could sustain and spread fire. The fire propagated through the concealed space above the ceiling faster than the crew could locate or fight it, attacking wiring and systems and ultimately overwhelming the airplane.

Because the materials that propagated the fire were certified as compliant and yet proved dangerously flammable, the TSB's central message was that the certification standard itself was inadequate. This is a design and certification finding, not a piloting one: the crew followed reasonable procedures for an unknown smell, but the aircraft was built with hidden flammable material and vulnerable wiring that allowed a small electrical fault to become an uncontrollable fire. The investigation drove the removal of MPET-covered insulation from the worldwide fleet and a fundamental tightening of material-flammability test standards.

Timeline

2 Sept 1998, ~20:18 EDT
Departure
Swissair 111 leaves JFK for Geneva with 229 aboard; the climb and cruise toward the Atlantic are normal.
~22:10 ADT
An odour
About 53 minutes after takeoff, cruising at FL330, the crew detect an abnormal smell in the cockpit and initially suspect an air-conditioning problem.
~22:14 ADT
Smoke, and a diversion request
The crew see smoke and declare "Pan Pan Pan," requesting a diversion; they are offered and turn toward Halifax.
Next minutes
Working the problem
The crew don oxygen masks, begin checklists, and need to dump fuel before they can land at Halifax; they request more distance and time.
~22:24 ADT
Emergency declared
As conditions worsen the crew declare an emergency; systems begin to fail in rapid succession as the fire spreads above the ceiling.
~22:25 ADT
Contact lost
Radio and secondary-radar contact with the aircraft are lost about five and a half minutes before impact.
~22:31 ADT
Impact
The MD-11 strikes the ocean near Peggy's Cove, Nova Scotia, and disintegrates; there are no survivors.
Sept 1998 onward
Recovery
A massive recovery operation lifts wreckage from the seabed; investigators eventually reconstruct large portions of the forward fuselage.
1999
Insulation action
As the wiring/insulation findings emerge, regulators move against MPET-covered insulation blankets, leading to their removal from aircraft.
27 March 2003
Final report
The TSB releases report A98H0003, attributing the loss to an in-flight fire most likely ignited by arcing and propagated by flammable insulation cover material that met an inadequate standard.

The Flight and the Smell

Swissair 111 was a premium overnight service between New York and Geneva, frequently carrying business travellers, flown by an experienced crew aboard a relatively young MD-11 — a three-engine wide-body and McDonnell Douglas's last airliner before its absorption into Boeing. The aircraft was equipped, in its forward business and first-class cabin, with an in-flight entertainment network: a then-fashionable supplemental system, retrofitted to the airplane, that drew significant electrical power and ran additional wiring through the forward sections.

The flight was routine until about 53 minutes after departure, when the pilots noticed an abnormal odour in the cockpit. Crews are trained to treat an unidentified smell cautiously, and the initial, reasonable hypothesis was the air-conditioning system, which can produce odours without a fire. The crew's actions from that point — donning oxygen masks, declaring a "Pan Pan" urgency call, requesting a diversion to nearby Halifax, beginning checklists, and preparing to dump fuel to reach a safe landing weight — were measured and procedurally sound for the information they had. What they could not know was how far behind the visible evidence the real fire already was: the smell and first wisps of smoke were the leading edge of a fire already established in the inaccessible attic space above their heads.

Twenty Minutes Above the Ceiling

The space above an airliner's cockpit and forward cabin ceiling is a dense, concealed run of wiring, ducting, and thermal-acoustic insulation that a crew cannot see into or reach in flight. On HB-IWF it held the aircraft's own wiring, the retrofitted IFEN wiring, and insulation blankets whose covering film was MPET. Somewhere in this area, on the right side of the cockpit near the rear wall, an electrical arc occurred. Investigators recovered wire fragments showing the tell-tale melted-copper signatures of arcing, including a segment of IFEN power cable in the most-probable origin area; the Board concluded the lead event likely involved one or more wires but could not isolate the single initiating conductor.

An arc by itself is a brief, localized event. What made it catastrophic was the surrounding material. The arc ignited the flammable cover of the insulation blankets, and once alight the MPET film could sustain and carry flame. The fire spread laterally and forward through the hidden attic, feeding on insulation and attacking wiring as it went. This is why the crew experienced a cascade: an odour, then smoke, then a rapid series of system failures as the fire consumed the electrical runs above them. The aircraft was descending and maneuvering toward Halifax and dumping fuel when, about five and a half minutes before impact, the flight recorders and radio contact were lost — the fire having degraded the very systems the crew needed. The MD-11 struck the water near Peggy's Cove at high speed and broke apart.

The timeline is the cruelest fact of the case. From the first odour to impact was on the order of twenty minutes, and the fire was already burning out of sight when the crew first detected anything. There was, the investigation found, very little additional time available even had they grasped the severity sooner; a hidden fire propagating through certified-but-flammable material in an unreachable space leaves a crew chasing an emergency it cannot directly confront.

The Investigation and Its Verdict

The TSB's investigation was vast: years of work, the recovery of more than two million wreckage fragments from the seabed, and the reconstruction of a substantial section of the forward fuselage to map the fire's path. The final report, A98H0003, was released on 27 March 2003 with a long list of findings as to causes and contributing factors, supported by safety recommendations issued both during and at the end of the investigation.

The Board concluded that an in-flight fire led to the loss of control and collision with the water; that the fire most likely started from an arcing event above the right side of the cockpit ceiling; and that the IFEN-related wiring was likely associated with the fire's initiation, though it could not be named the sole cause. Crucially, it found that the fire propagated because of flammable materials — above all the MPET cover on the insulation blankets — and that the certification standards for material flammability were inadequate, permitting materials that could be ignited and could sustain or propagate fire. The MPET-covered blankets had passed the flammability test required for certification; the test simply did not predict their real fire behaviour. The TSB also faulted the absence of an effective means to detect and suppress a fire in the concealed attic, and aspects of the airplane's circuit-protection and standby systems.

This is properly a design and certification finding, and it is why the stat cell reads Design rather than Pilot or Maintenance. The crew was not found to have caused the accident; they responded reasonably to an unknown odour and were defeated by the speed and concealment of the fire. The aircraft, although built and certified to the rules of its day, contained a hidden flammability hazard and wiring vulnerable to arcing — a latent design problem that the certification standards had failed to catch.

The Five Factors

01
"Certified" is not the same as "safe."
The MPET insulation cover met the flammability test in force, yet it ignited and spread fire. A material that passes a certification test but behaves dangerously in a real fire reveals a gap in the test, not safety in the material; standards must be validated against realistic fire scenarios, not treated as proof of fitness.
02
Arcing wiring as an ignition source
A small electrical arc, the kind that aging or chafing wiring can produce, was enough to start the fire. Wiring must be routed, separated, and protected so that an arc cannot find flammable material — and circuit protection must be designed to interrupt the fault before it becomes an ignition.
03
Retrofitted systems add hidden risk
The IFEN was a supplemental system added to the aircraft, threading additional powered wiring through crowded concealed spaces. Adding load and wiring to an existing airplane changes its fire and electrical risk profile; such modifications demand the same flammability and arcing scrutiny as the original design.
04
Fires in concealed spaces are nearly unfightable
The fire burned in an attic the crew could neither see nor reach, so detection came only when smoke and system failures appeared — far too late. Hidden spaces that carry wiring and insulation need fire detection and a means of access or suppression; a fire a crew cannot find, it cannot fight.
05
A reasonable response can still be too slow for a hidden fire
The crew's cautious, procedural handling of an unknown odour was appropriate for the information available, yet the fire was already established and spreading out of sight. Emergency procedures and design must assume a smell may be the late symptom of an advanced hidden fire, and bias toward an immediate descent and landing.

Aftermath

The investigation's most far-reaching consequence concerned the materials. Even before the final report, the wiring and insulation findings prompted regulators to act against MPET-covered thermal-acoustic insulation blankets, leading to their removal from the worldwide transport fleet — a large, costly retrofit program. The deeper change followed: the TSB's conclusion that the flammability test standard itself was inadequate drove the adoption of far more demanding material-flammability requirements, including radiant-panel flame-propagation testing for insulation, replacing the older vertical-burn test that the MPET cover had passed. The accident also reinforced industry attention to wiring integrity and arcing and to fire detection in concealed areas.

There was no criminal prosecution; the cause was a latent design-and-certification flaw rather than a culpable operational act. For the families of the 229, the resolution was a meticulously documented cause, a set of safety recommendations, and a fleet stripped of the flammable insulation that had let an arc become an inferno. The Swissair 111 investigation is now a standard reference for how a small ignition event, combined with materials that were legal but not safe and a fire in a space no one could reach, can overwhelm even a sound crew in minutes.

Lessons

  1. Validate material-flammability standards against realistic fire scenarios; a material that passes the certification test but ignites and spreads flame in service proves the test is wrong, not the material safe.
  2. Route, separate, and protect wiring so that an arc cannot reach flammable material, and design circuit protection to interrupt arcing faults before they ignite.
  3. Subject retrofitted and supplemental systems to the same flammability and arcing scrutiny as the original design; added wiring in concealed spaces adds hidden fire risk.
  4. Provide detection and a means of access or suppression for concealed spaces carrying wiring and insulation; a fire that cannot be located cannot be fought.
  5. Treat an unidentified in-flight smell as the possible late symptom of an advanced hidden fire and bias procedures toward an immediate descent and landing.

References