← Back to incidents
Boeing 737 MAX MCAS System Caused Two Fatal Crashes Killing 346 People
CriticalBoeing's MCAS automated flight system caused two fatal 737 MAX crashes killing 346 people by relying on single faulty sensors to override pilot control. Boeing concealed system details from pilots and regulators, leading to worldwide grounding and $2.5 billion legal settlement.
Category
Safety Failure
Industry
Other
Status
Resolved
Date Occurred
Oct 29, 2018
Date Reported
Oct 29, 2018
Jurisdiction
International
AI Provider
Other/Unknown
Model
MCAS (Maneuvering Characteristics Augmentation System)
Application Type
embedded
Harm Type
physical
Estimated Cost
$2,500,000,000
People Affected
346
Human Review in Place
No
Litigation Filed
Yes
Litigation Status
settled
Regulatory Body
Federal Aviation Administration (FAA)
Fine Amount
$243,600,000
aviationautomated_systemssafety_criticalregulatory_failurefatal_accidentssensor_failurepilot_override
Full Description
On October 29, 2018, Lion Air Flight 610 crashed into the Java Sea shortly after takeoff, killing all 189 people aboard. Less than five months later, on March 10, 2019, Ethiopian Airlines Flight 302 crashed six minutes after takeoff, killing all 157 people on board. Both crashes involved Boeing 737 MAX aircraft and were caused by the Maneuvering Characteristics Augmentation System (MCAS), an automated flight control system designed to prevent stalls by automatically pushing the aircraft's nose down when it detected high angle-of-attack conditions.
The MCAS system was Boeing's solution to aerodynamic changes caused by larger engines on the 737 MAX compared to previous 737 models. However, the system was designed with a critical flaw: it relied on input from only one of two angle-of-attack sensors, creating a single point of failure. When a faulty sensor provided incorrect high angle-of-attack readings, MCAS would repeatedly activate, pushing the aircraft's nose down with forces that pilots could not easily counteract using normal control inputs. In both crashes, pilots fought against the system's repeated interventions but were ultimately unable to regain control of the aircraft.
Boeing's handling of MCAS development and disclosure proved highly problematic. The company did not inform pilots, airlines, or initially even some regulators about the system's existence and operation. Flight manuals and pilot training materials made no mention of MCAS, leaving crews unprepared to diagnose and respond to its malfunction. Boeing made this decision partly to avoid triggering requirements for additional pilot training, which would have increased costs for airlines and potentially hurt 737 MAX sales. The Federal Aviation Administration (FAA) had delegated much of the aircraft's safety certification to Boeing itself under the Organization Designation Authorization program, creating conflicts of interest in the approval process.
Following the Ethiopian Airlines crash and recognition of similarities with the Lion Air accident, aviation authorities worldwide grounded the entire 737 MAX fleet in March 2019. The grounding lasted 20 months and cost Boeing billions in lost sales, compensation payments, and legal settlements. Investigation revealed that Boeing had downplayed MCAS's capabilities and authority during certification, describing it as a minor system enhancement rather than a flight-critical system capable of overriding pilot inputs. Internal Boeing communications later released showed employees knew about problems with pilot training and system design but prioritized cost savings and schedule over safety concerns.
The legal and regulatory consequences were severe and far-reaching. In January 2021, Boeing agreed to pay $2.5 billion to resolve a criminal conspiracy charge, including a $243.6 million fine, $1.77 billion in compensation to airlines, and $500 million for a victim compensation fund. The Department of Justice charged Boeing with conspiracy to defraud the FAA by concealing important information about MCAS. Multiple Boeing executives faced individual charges, and the company agreed to enhanced oversight and compliance monitoring. Civil lawsuits from victims' families resulted in additional settlements, while Boeing's stock price and reputation suffered lasting damage. The FAA eventually approved design changes requiring MCAS to receive input from both angle-of-attack sensors and giving pilots clearer override procedures before allowing the 737 MAX to return to service in November 2020.
Root Cause
MCAS system relied on single angle-of-attack sensor without redundancy or pilot override capability. Faulty sensor data triggered repeated nose-down commands that pilots could not counteract, leading to loss of aircraft control and fatal crashes.
Mitigation Analysis
Multiple sensor redundancy with voting logic could have prevented single-point-of-failure. Mandatory pilot training on MCAS operation and clear override procedures were essential but omitted. Real-time monitoring systems could have detected erratic sensor readings and disabled automated inputs. Proper disclosure to regulators and airlines about system behavior was critical for safe operation.
Litigation Outcome
Boeing agreed to $2.5 billion settlement with DOJ including $243.6 million criminal fine, $1.77 billion compensation to airlines, and $500 million victim compensation fund. Multiple civil lawsuits also settled.
Lessons Learned
Critical automated systems require redundant sensors and clear pilot override capabilities. Regulatory capture through self-certification programs can compromise safety oversight. Full transparency about automated system behavior is essential for safe operations and proper pilot training.
Sources
Boeing Was 'Go, Go, Go' to Beat Airbus With the 737 Max
The New York Times · Mar 29, 2019 · news
Boeing Charged with 737 MAX Fraud Conspiracy and Agrees to Pay over $2.5 Billion
U.S. Department of Justice · Jan 7, 2021 · regulatory action