Learning from Five Decades of Hydrocarbon Losses

Since the 1970s, the hydrocarbon industry has recorded a series of high-impact incidents that reshaped safety regulation and operating practices. Fires, explosions, blowouts and structural failures have caused hundreds of fatalities, severe environmental damage and prolonged operational disruption. Each event triggered investigations and reforms, yet comparable failures continue to occur across different regions and asset types, suggesting that the underlying challenge lies not in technical capability but in how organisations internalise and sustain learning.

A review of major incidents across offshore, refining, LNG and pipeline operations reveals common dynamics despite their diverse settings. Offshore disasters such as platform fires and blowouts were linked to breakdowns in well integrity, maintenance and shift handover. Refinery explosions frequently occurred during startup or abnormal operations, exposing vulnerabilities in work planning and process control. LNG and gas facility incidents highlighted the consequences of poor maintenance, inadequate inspection and weak coordination during construction or modification activities. Urban gas disasters demonstrated how these failures become magnified when hazardous systems intersect densely populated areas. The repetition of these dynamics across decades points to systemic, rather than situational, weaknesses.

Post-incident investigations consistently identify immediate causes: equipment malfunction, procedural lapses, human error, or delayed emergency response. While accurate, these findings often represent the final link in a longer causal chain. Corrective actions typically focus on revising procedures, conducting retraining and reinforcing compliance, creating a sense of closure without fundamentally altering the conditions that allowed the failure to develop. Over time, the distinction between addressing symptoms and removing causes becomes blurred.

The recurrence of similar incidents reflects a set of organisational behaviours that persist even in mature operations. Safety management remains largely reactive, intensifying after a major event and gradually weakening as memories fade. Risk becomes normalised as abnormal conditions are encountered without consequence. Work planning and risk assessment degrade under schedule and production pressures, while procedural compliance becomes uneven. In this environment, systems appear stable until multiple small weaknesses align.

One recurring feature of post-incident response is the dominance of administrative controls. Procedures are expanded, forms multiplied and training programmes refreshed.

While these measures have value, their effectiveness depends heavily on consistent human behaviour and organisational attention. When administrative controls substitute for engineering or systemic changes, they tend to lose strength over time, becoming artefacts of compliance rather than barriers to failure.

Several forces weaken the transfer and retention of lessons. Distance reduces relevance, as incidents are treated as local events rather than industry-wide warnings. Cultural factors, including fear of blame or litigation, constrain open reporting and limit the depth of analysis. Siloed thinking leads organisations to dismiss lessons from facilities perceived as different. Time further erodes learning as experienced personnel leave, assets age, ownership changes and safeguards introduced after earlier losses slowly degrade without systematic verification.

The most significant risk does not arise immediately after a major incident but years later, when controls introduced in response begin to weaken. Design intent is forgotten, maintenance standards slip and latent defects accumulate unnoticed. The organisation still believes the barrier exists, but its real-world effectiveness has diminished. This gradual drift explains why catastrophic failures can reappear long after reforms were declared complete.

Sustained prevention depends on treating learning as a continuous process rather than a post-incident task. Proactive reporting of near misses, rigorous root-cause analysis and broad communication beyond the HSE function are necessary foundations.

The history of large hydrocarbon losses shows that repeated failures are rarely the result of ignorance. They emerge from the gradual weakening of organisational memory, controls and vigilance.

Equally important is the ongoing verification that corrective actions remain effective as conditions change. Actions matter not because they are closed, but because they demonstrably reduce the likelihood of recurrence over time.

The history of large hydrocarbon losses shows that repeated failures are rarely the result of ignorance. They emerge from the gradual weakening of organisational memory, controls and vigilance. When learning is confined to reports and procedures, its impact fades. If embedded, tested and reinforced across years, it becomes a barrier in its own right. The difference between the two continues to define whether the next incident becomes an anomaly or another entry in a long and familiar record.

This case study is adapted from a paper presented by Pravin Kumar, Specialist, HSE Incident Investigation, ADNOC, at Bharat Fire & Safety Congress 2025 organised by ITEN Media in association with ENCIS.