All Sectors

Arvia: The Lift That Was Never Isolated

🕑 5 min read words Safety • Incident • Engineering

Vessel: Arvia (Passenger Cruise Ship, built 2022, 185,581 GT)
Date: 26 October 2025
Location: 75nm north-west of Cape Finisterre, Spain
Outcome: Fatality — Electrical Technician
Human Factors: Electrical Isolation · Stop-Work Triggers · Interlock Reliance
Source: MAIB Interim Report, January 2026 (investigation on behalf of the Bermuda Administration)

2 decision points · 4 outcome paths · 5 min read

What Happened

On 26 October 2025, aboard the cruise ship Arvia, an electrical technician and the staff electro-technical officer (SETO) were testing a passenger lift from inside the car, following overnight repairs. The lift was not electrically isolated during the test. The lift was stopped on deck 11, and the technician went to deck 12 to open the lift shaft doors and inspect the top of the car — but the door release key wouldn't operate; a known defect.

He went up one further deck, to deck 14, and opened the lift shaft doors there instead. As the SETO left the lift car to join him, the car and the deck 11 shaft doors automatically closed. At almost the same moment, the technician entered the shaft from deck 14, and the doors closed behind him.

The Interlocks Re-Armed Themselves

With every door now closed — the car on deck 11, the shaft door on deck 14 — every interlock that had been preventing the lift from operating was re-enabled. A lift call signal, stored from earlier and still pending, triggered the lift to move. It moved upward, into the space the technician now occupied, and crushed him between the car and the shaft wall.

A medical emergency was declared within ten minutes. He was declared deceased by the ship's doctor shortly after. Arvia diverted to A Coruña, Spain, where his body was recovered and taken ashore.

MAIB's Initial Findings

Four things had to align for this to happen, and MAIB's interim report lists them plainly:

The lift was not electrically isolated at the time of the accident.
The release mechanism for the deck 12 lift shaft doors had a known defect — the reason the technician moved up to deck 14 at all.
All interlocks that had been preventing the lift from operating re-enabled the moment the car and shaft doors closed.
A stored lift call signal caused the lift to move the instant the interlocks re-armed.

The investigation is continuing, examining the manufacturer's safety guidelines, the documented safe system of work, supervision and oversight of the task, and the actions of the crew involved.

Recommended Actions

Electrically isolate any lift before anyone enters the shaft, the car top, or the pit — testing "from inside the car" is not a substitute for isolation when anyone may enter the shaft itself during the same task.
Treat a known equipment defect discovered mid-task (like a door release key that won't operate) as a stop-work trigger — reassess before working around it, not after.
Never assume interlocks will stay disabled just because a task is "still in progress." Interlocks re-arm based on door/car position, not on whether the crew consider the job finished.
Clear any stored or pending call signals before anyone works inside a lift shaft, and confirm the lift is genuinely isolated, not just temporarily inoperative.
When two people are working across separated locations on the same piece of moving machinery, maintain positive communication before either one changes position — don't assume the other person's status.

Human Element Analysis

Electrical Isolation

The lift was being tested "live" — a normal approach for confirming a repair, but one that assumes no one will be in a position the moving lift can reach. That assumption broke down the moment two people needed to be in two different places at once.

Stop-Work Triggers

A defective door release on deck 12 was a genuine anomaly — equipment not behaving as designed. Working around it by going up a further deck, rather than stopping to reassess, removed a chance to catch the wider risk before it mattered.

Interlock Reliance

Interlocks are a real safety layer — but they protect against the lift running with doors open, not against two people's positions and one closed-door state aligning in a way nobody anticipated.

Industry	Incident	The Parallel
General Industry	Multiple US OSHA lockout/tagout fatalities, ongoing pattern since 1989's LOTO standard (29 CFR 1910.147)	Machinery re-energising unexpectedly during maintenance, because isolation wasn't physically verified before entry — the exact mechanism behind Arvia's accident, in an entirely different industry.
Manufacturing	Multiple elevator/lift maintenance fatalities investigated by the US Elevator Escalator Safety Foundation	A technician working inside a shaft while the lift remained electrically live, relying on interlocks rather than isolation, is one of the most recurring fatal-accident patterns in the global lift maintenance industry.
Aviation	Continental Express Flight 2574, 1991	A maintenance task left incomplete overnight, picked back up without full re-verification of what had and hadn't been secured, led to a fatal accident — a parallel to resuming a "still in progress" lift repair without re-confirming isolation status.

See How You’d Handle It

Arvia's decision simulator puts you at the point the lift testing begins — and again at the point a defect is discovered mid-task. Two decision points, four outcome paths, one of them the real one.

Test Your Knowledge

Think you've got this covered? Put it to the test in Crew Connect's free Knowledge Checker — try a quick engineering round and see how you score.