BSafe Case Study 32 — Nobody Thought Hydraulic Oil Would Burn

A Job Nobody Planned to Rush

The ship had dropped anchor at 0424, waiting for a berth. The chief officer's plan for the day was routine: open all five cargo hold hatch covers, ventilate, do a final inspection before loading. At 1110, an AB spotted a hydraulic oil leak on the main deck near Cargo Hold No. 4. The bosun was told, sawdust and absorbent went down to contain it — a normal response to a normal problem.

Then it stopped being normal. The bolts on the leaking flange were seized. Berthing was expected shortly, and the methods that would have kept this a cold job — cutting the bolts for repair in the engine room, working them loose mechanically — were ruled out on time. The chief officer, deck fitter and bosun settled on an oxy-acetylene torch to heat the seized bolts free. Britannia's investigation found the people involved in that decision did not think hydraulic oil was flammable.

The Permit Was Still Being Written When the Torch Lit

An OS was assigned to assist, the hydraulic isolation valves for the No. 4 hatch cover were closed — real precautions, genuinely taken. Then the chief officer left the worksite to go complete the risk assessment and hot work permit paperwork, and to brief the master on the plan. The deck fitter started cutting before that paperwork existed. He was wearing standard PPE — not hot-work-rated PPE.

The upper bolt came free without incident. On the lower bolt, hydraulic oil began leaking from the flange as the torch was working it. At 1135, the escaping oil met the open flame and ignited immediately, engulfing the deck fitter before he had time to react or move clear.

What Went Right, Fast

An AB on the No. 5 hatch cover saw the fire and shouted the alarm. The OS raised it properly and both went to help. The bosun put the flames out with a bucket of water. The master saw the smoke from the bridge and was on scene with the chief engineer within moments. The injured fitter, despite severe burns and destroyed protective clothing, stayed conscious and able to communicate throughout. A SAR helicopter had him off the ship in under two hours from the moment of ignition — arriving 1253, casualty aboard 1304, away by 1309. The pipe itself was fixed the next day using the cold-work method that had been ruled out under time pressure the day before.

What This Illustrates

Britannia's own framing for this case is direct: a gap between SMS procedures and actual onboard practices. Three things sit inside that gap:

1. The permit wasn't finished before the work started. Sending the responsible officer away to complete the paperwork while the job is already underway inverts the entire purpose of a permit to work — it's meant to be the gate the job passes through, not a form filled in alongside it.
2. Hydraulic oil's flammability wasn't recognised. A hazard assessment is only as good as the hazards it actually names — an experienced team ruled out the safer repair methods on time pressure without ever identifying the one substance in the job that could catch fire.
3. PPE was matched to the crew member's normal role, not to the actual task. Standard working PPE is not hot-work PPE — the difference is exactly what stands between a contained spark and a crew member's skin.