← Back to incidents
Boeing 737 MAX MCAS Automated Flight System Failures Lead to Two Fatal Crashes
CriticalBoeing's MCAS automated flight control system caused two fatal 737 MAX crashes killing 346 people due to reliance on single faulty sensors and inadequate pilot oversight mechanisms.
Category
Safety Failure
Industry
transportation
Status
Resolved
Date Occurred
Oct 29, 2018
Date Reported
Oct 29, 2018
Jurisdiction
International
AI Provider
Other/Unknown
Model
MCAS (Maneuvering Characteristics Augmentation System)
Application Type
embedded
Harm Type
physical
Estimated Cost
$20,000,000,000
People Affected
346
Human Review in Place
No
Litigation Filed
Yes
Litigation Status
settled
Regulatory Body
Federal Aviation Administration (FAA)
Fine Amount
$243,600,000
aviationautomated_systemssafety_criticalregulatory_failurehuman_factorssensor_failureboeingmcas
Full Description
On October 29, 2018, Lion Air Flight 610 crashed into the Java Sea shortly after takeoff from Jakarta, killing all 189 people aboard. Less than five months later, on March 10, 2019, Ethiopian Airlines Flight 302 crashed near Addis Ababa, killing all 157 passengers and crew. Both crashes were attributed to failures in Boeing's Maneuvering Characteristics Augmentation System (MCAS), an automated flight control system designed to prevent stalls in the 737 MAX aircraft.
The MCAS system was designed to automatically push the aircraft's nose down when sensors detected a high angle of attack that could lead to a stall. However, the system had a critical design flaw: it relied on data from only one of the aircraft's two angle-of-attack sensors, creating a single point of failure. When these sensors provided erroneous data indicating an impending stall, MCAS repeatedly activated, pushing the aircraft nose down despite pilots' attempts to regain control. The system could activate multiple times during a single flight, and pilots were not adequately informed about its existence or operation.
Investigations revealed that Boeing had not disclosed the full capabilities and operation of MCAS to airlines or pilots. The system was not mentioned in flight manuals, and pilots received minimal training on how to respond when it malfunctioned. The crashes exposed serious deficiencies in both the automated system design and human oversight protocols. Pilots were unable to diagnose the problem quickly enough to prevent catastrophic outcomes, as they were unaware that an automated system was repeatedly overriding their control inputs.
The aftermath of these crashes led to a global grounding of all 737 MAX aircraft for nearly two years, the longest grounding in commercial aviation history. Boeing faced intense scrutiny from regulators, particularly the Federal Aviation Administration (FAA), which had delegated much of the aircraft's safety certification to Boeing itself under the Organization Designation Authorization program. This regulatory approach was heavily criticized for creating conflicts of interest and inadequate oversight of safety-critical systems.
The financial and reputational consequences for Boeing were severe. The company faced over $20 billion in costs related to the crashes, including production delays, customer compensation, legal settlements, and regulatory fines. Boeing ultimately agreed to pay $2.5 billion in settlements, including a $243.6 million criminal penalty to the Department of Justice. The company was also required to implement significant design changes to the MCAS system, including requiring input from both angle-of-attack sensors, limiting the system's authority, and providing clear alerts to pilots when the system activates.
Root Cause
The MCAS system relied on input from a single angle-of-attack sensor without redundancy, and when faulty sensor data triggered the system, it repeatedly pushed the aircraft nose down without pilot awareness or adequate manual override capability.
Mitigation Analysis
Critical failures included single-point-of-failure sensor design without redundancy checks, inadequate pilot training on the automated system, and insufficient human oversight during flight operations. Multi-sensor validation, mandatory pilot notification systems, and enhanced manual override capabilities could have prevented these tragedies.
Litigation Outcome
Boeing agreed to pay over $2.5 billion in fines and settlements, including $243.6 million criminal penalty to DOJ and $1.77 billion to airlines
Lessons Learned
This incident highlights the critical importance of redundancy in safety-critical automated systems, transparent disclosure of AI/automation capabilities to human operators, and the need for robust regulatory oversight of automated decision-making systems in high-stakes environments.
Sources
Boeing's 737 Max: 1960s Design, 1990s Computing Power and Paper Manuals
New York Times · Mar 17, 2019 · news
Boeing Charged with 737 MAX Fraud Conspiracy and Agrees to Pay over $2.5 Billion
U.S. Department of Justice · Jan 7, 2021 · regulatory action