All Sectors

BSafe Case Study 32 — Nobody Thought Hydraulic Oil Would Burn

🕑 5 min read words Safety • Incident

Vessel: 23,872gt Handymax bulk carrier (anonymised per Britannia's own convention)
Date & location: At anchor, awaiting berth, cargo hold ventilation/inspection in progress
Outcome: Severe burn injuries to a deck fitter — hydraulic oil ignited from an oxy-acetylene torch during hot work on a seized pipe flange; MEDEVAC by SAR helicopter
Human factors: Permit-to-Work Sequencing Failure · Hazard Misidentification · Inadequate PPE for the Task
Source: Britannia P&I Club, BSafe Incident Case Study No. 32 — Serious burn injury incident to a crew member (published 26 August 2026)

1 real case studyPublished this week~4 min read

A Job Nobody Planned to Rush

The ship had dropped anchor at 0424, waiting for a berth. The chief officer's plan for the day was routine: open all five cargo hold hatch covers, ventilate, do a final inspection before loading. At 1110, an AB spotted a hydraulic oil leak on the main deck near Cargo Hold No. 4. The bosun was told, sawdust and absorbent went down to contain it — a normal response to a normal problem.

Then it stopped being normal. The bolts on the leaking flange were seized. Berthing was expected shortly, and the methods that would have kept this a cold job — cutting the bolts for repair in the engine room, working them loose mechanically — were ruled out on time. The chief officer, deck fitter and bosun settled on an oxy-acetylene torch to heat the seized bolts free. Britannia's investigation found the people involved in that decision did not think hydraulic oil was flammable.

The Permit Was Still Being Written When the Torch Lit

An OS was assigned to assist, the hydraulic isolation valves for the No. 4 hatch cover were closed — real precautions, genuinely taken. Then the chief officer left the worksite to go complete the risk assessment and hot work permit paperwork, and to brief the master on the plan. The deck fitter started cutting before that paperwork existed. He was wearing standard PPE — not hot-work-rated PPE.

The upper bolt came free without incident. On the lower bolt, hydraulic oil began leaking from the flange as the torch was working it. At 1135, the escaping oil met the open flame and ignited immediately, engulfing the deck fitter before he had time to react or move clear.

What Went Right, Fast

An AB on the No. 5 hatch cover saw the fire and shouted the alarm. The OS raised it properly and both went to help. The bosun put the flames out with a bucket of water. The master saw the smoke from the bridge and was on scene with the chief engineer within moments. The injured fitter, despite severe burns and destroyed protective clothing, stayed conscious and able to communicate throughout. A SAR helicopter had him off the ship in under two hours from the moment of ignition — arriving 1253, casualty aboard 1304, away by 1309. The pipe itself was fixed the next day using the cold-work method that had been ruled out under time pressure the day before.

What This Illustrates

Britannia's own framing for this case is direct: a gap between SMS procedures and actual onboard practices. Three things sit inside that gap:

The permit wasn't finished before the work started. Sending the responsible officer away to complete the paperwork while the job is already underway inverts the entire purpose of a permit to work — it's meant to be the gate the job passes through, not a form filled in alongside it.
Hydraulic oil's flammability wasn't recognised. A hazard assessment is only as good as the hazards it actually names — an experienced team ruled out the safer repair methods on time pressure without ever identifying the one substance in the job that could catch fire.
PPE was matched to the crew member's normal role, not to the actual task. Standard working PPE is not hot-work PPE — the difference is exactly what stands between a contained spark and a crew member's skin.

Human Element Analysis

Permit-to-work sequencing failure

A permit completed after work starts isn't a formality gap — it's the control arriving too late to control anything. The isolation valves were closed and an assistant assigned; genuine precautions were taken. The one precaution missing was the one that exists specifically to catch precisely this kind of oversight before the torch is lit.

Hazard misidentification under time pressure

Ruling out the safe repair methods happened fast, driven by a real operational deadline — berthing. Nobody in that fast decision stopped to ask what, specifically, could go wrong with the fast option. Time pressure doesn't just push people toward the riskier choice; it shortens exactly the pause where a hazard like ‘this is flammable’ would normally get named.

PPE mismatch

The deck fitter's PPE was appropriate for his normal duties, not for the hot-work task he was actually performing that hour. A hot work permit exists partly to force this exact question — what does THIS job need, not what does this person usually wear.

Cross-Industry Parallels

Industry	Incident	The parallel
Offshore/Energy	Piper Alpha (1988)	A permit-to-work handover failure — work proceeding on equipment that hadn't actually been isolated in practice, only on paper — sat at the centre of that disaster, the same structural gap as hot work starting here before its own permit existed.
Rail	Ladbroke Grove rail crash (1999)	Investigators found a safety-critical hazard (a poorly-sited signal with a history of being passed at danger) that had been flagged before but never adequately actioned — similar to hydraulic oil's flammability here: a hazard that was knowable, just not actually identified by the people making the call.
Nuclear	Davis-Besse reactor vessel head incident (2002)	A known corrosion risk went unaddressed because inspection and repair scheduling gave way to operational/production pressure — the same trade-off this case shows: safer methods ruled out specifically because of a schedule, with the hazard analysis not keeping pace with the time pressure.

Test Your Knowledge

Think you've got this covered? Put it to the test in Crew Connect's free Knowledge Checker — try a quick safety round and see how you score.