Deepwater Horizon — What Happened,
Deepwater Horizon — What Happened, Why the Rig Exploded, and What Went Wrong
On the evening of 20 April 2010, workers aboard the offshore drilling rig Deepwater Horizon were completing operations on the Macondo well in the Gulf of Mexico.
The well had reached its target depth.
The drilling phase was nearly finished.
Then hydrocarbons surged uncontrolled from the well.
Gas reached the rig.
Explosions followed.
Fire swept through Deepwater Horizon.
Eleven men were killed.
The rig burned for roughly two days before sinking on 22 April 2010.
But the disaster was only beginning.
With the rig gone, oil continued flowing from the damaged Macondo well into the Gulf of Mexico for almost three months, creating one of the largest marine oil spills in history.
Deepwater Horizon became a case study in how technical failure, misunderstood warning signs, operational pressure and flawed decision-making can combine into catastrophe.
What Was Deepwater Horizon?
Deepwater Horizon was a semi-submersible offshore drilling rig owned by Transocean and operating under contract to BP.
It was designed to drill in deep water and had worked on numerous offshore wells.
In April 2010, the rig was positioned above the Macondo Prospect, officially designated Mississippi Canyon Block 252, in the Gulf of Mexico.
The wellhead lay approximately 5,000 feet beneath the sea surface.
The well itself extended many thousands of feet farther below the seabed.
By 20 April, drilling was largely complete and preparations were being made to temporarily abandon the well before a production facility returned at a later date.
It was during those final operations that control of the well was lost.
What Is a Blowout?
An oil or gas well contains fluids under pressure.
While drilling, that pressure must be controlled continuously.
One of the principal defences is drilling mud — a dense fluid circulated through the well which helps counteract the pressure of oil and gas formations underground.
If the pressure within the formation overcomes the pressure controlling the well, hydrocarbons can begin flowing upwards.
If that flow becomes uncontrolled, it is called a blowout.
Blowouts are among the most dangerous events in offshore drilling.
Deepwater Horizon suffered exactly such an event.
The Macondo Well
The Macondo well had presented technical difficulties.
There had been problems involving drilling conditions, lost circulation and decisions concerning how the well would ultimately be secured.
By April 2010, the operation was behind schedule.
BP, as the well operator, had made a series of decisions concerning casing design, cementing and temporary abandonment procedures.
Individually, many of these decisions could be defended as standard or permissible industry practice.
The problem was how they interacted.
Several barriers intended to keep hydrocarbons inside the well were either ineffective, incorrectly interpreted or defeated.
When the final failure occurred, there was little margin left.
The Cement Barrier
One of the most important barriers in the well was cement placed around the production casing.
The cement was intended to isolate oil and gas-bearing formations and prevent hydrocarbons from entering the well.
Halliburton had carried out the cementing work.
Questions later focused on the design and stability of the cement slurry and on whether sufficient testing had been performed to confirm that the cement had formed an effective barrier.
The cement did not successfully prevent hydrocarbons from entering the well.
This became one of the central technical failures behind the disaster.
But it was not the only failure.
The Negative Pressure Test
On 20 April, the crew performed a negative pressure test.
The purpose was to determine whether the well remained secure when pressure inside it was reduced.
The test produced abnormal results.
Pressure readings did not behave as expected.
One drill pipe showed significant pressure when the crew expected essentially none.
This should have been a major warning.
Instead, the confusing results were interpreted as acceptable.
The well was considered secure.
That decision proved catastrophic.
The test had effectively provided an opportunity to identify that something was wrong before the situation became uncontrollable.
That opportunity was missed.
Replacing Drilling Mud
Once the negative pressure test was accepted, heavy drilling mud began being displaced from the well by much lighter seawater.
This reduced the hydrostatic pressure holding back the reservoir.
If the cement barrier was sound, that should not have created a problem.
It was not sound.
Oil and gas began entering the well.
The influx moved upwards towards the rig.
For a period, warning signs were present in flow and pressure data.
But the developing kick was not recognised soon enough.
The Blowout Reaches the Rig
As hydrocarbons rose through the well, they expanded rapidly because of the falling pressure.
By the time gas reached the rig, events accelerated dramatically.
Drilling mud and hydrocarbons erupted onto the drill floor.
Gas spread across Deepwater Horizon.
The rig contained numerous possible ignition sources.
At approximately 9.49pm, explosions tore through the vessel.
Fire engulfed large parts of the rig.
Personnel scrambled to escape.
Some jumped into the sea.
Emergency systems were activated, but the situation was already beyond normal control.
The Eleven Men Who Died
Eleven workers were killed in the disaster:
- Jason Anderson
- Aaron Dale Burkeen
- Donald Clark
- Stephen Curtis
- Gordon Jones
- Roy Wyatt Kemp
- Karl Kleppinger Jr
- Blair Manuel
- Dewey Revette
- Shane Roshto
- Adam Weise
Their deaths are sometimes overshadowed by the enormous environmental consequences of the spill.
They should not be.
Deepwater Horizon was first and foremost an industrial accident in which eleven men went to work and did not return home.
The Blowout Preventer
At the seabed sat one of the well’s most important emergency systems: the blowout preventer, commonly known as the BOP.
This enormous stack of valves and hydraulic equipment was intended to seal the well during an emergency.
One of its final defences was the blind shear ram.
In theory, powerful steel blades could cut through the drill pipe and seal the well.
During the Macondo blowout, the BOP failed to stop the uncontrolled flow.
Later investigation found that the drill pipe had buckled under forces inside the well and moved away from the position in which the shear ram could successfully cut and seal it.
The system activated but failed to isolate the well.
The last major mechanical defence had been defeated.
Abandoning Deepwater Horizon
The explosions disabled much of the rig.
Fire spread rapidly.
Surviving workers moved towards lifeboats and emergency evacuation points.
The Coast Guard and nearby vessels joined rescue operations.
Most of the crew escaped.
Search operations were launched for the eleven missing workers, but none was recovered alive.
Deepwater Horizon continued burning.
The photographs became some of the defining images of the disaster: an enormous offshore rig surrounded by flame and thick black smoke in the open Gulf.
The Rig Sinks
On 22 April 2010, Deepwater Horizon sank.
The rig descended approximately 5,000 feet to the seabed.
Its riser pipe, which had connected the rig to the blowout preventer, collapsed and twisted.
Oil continued escaping from the Macondo well.
What had begun as a fatal offshore accident now became an environmental emergency on an enormous scale.
The Oil Spill
Oil flowed into the Gulf of Mexico for 87 days.
Early estimates of the flow rate varied considerably.
Eventually, government scientific teams estimated that approximately 4.9 million barrels of oil had been released from the reservoir, although a portion was captured before entering the sea.
The slick spread across a vast area.
Oil reached shorelines in several Gulf states.
Marshes, beaches and marine habitats were contaminated.
Fisheries and tourism suffered severe disruption.
The disaster became the largest marine oil spill in the history of the petroleum industry.
Attempts to Stop the Flow
Stopping a blowout almost a mile below the ocean surface presented unprecedented difficulties.
Several methods were attempted.
Remotely operated vehicles tried to activate components of the blowout preventer.
A large containment dome was lowered towards the leak, but methane hydrates formed inside it and prevented it from working as intended.
A procedure known as a top kill attempted to pump heavy drilling fluids into the well.
It failed.
Eventually, a containment cap significantly reduced the discharge.
The well was finally declared effectively sealed after a relief well allowed heavy fluid and cement to be pumped into it.
On 19 September 2010, the US government declared the Macondo well effectively dead.
Why Did Deepwater Horizon Happen?
The disaster did not result from one isolated mistake.
Investigations identified a chain of failures.
Among them were:
- an ineffective cement barrier;
- inadequate evaluation of cement integrity;
- misinterpretation of the negative pressure test;
- failure to recognise the developing influx of hydrocarbons;
- decisions that reduced the safety margin within the well;
- shortcomings in emergency systems;
- failure of the blowout preventer to seal the well.
The accident demonstrated a familiar feature of complex disasters.
Catastrophe rarely requires every system to fail.
It requires enough barriers to fail in the correct sequence.
At Macondo, they did.
The Role of BP
BP was the operator responsible for the Macondo well.
Following the disaster, the company’s decisions came under intense examination.
Investigators questioned elements of well design, testing, risk management and supervision.
BP later pleaded guilty in the United States to criminal charges connected with the disaster and agreed to major financial settlements.
The company’s total costs associated with cleanup, compensation, fines and settlements eventually ran into tens of billions of dollars.
But responsibility was not confined to one organisation.
Multiple companies were involved in the drilling operation.
The Role of Transocean and Halliburton
Transocean owned and operated Deepwater Horizon.
Its personnel worked aboard the rig and were involved directly in drilling operations.
Halliburton performed cementing work on the Macondo well.
Investigations examined actions and decisions taken by all three principal companies.
The result was not a simple story of one company making one mistake.
It was a complex industrial system involving contractors, management structures, technical assumptions and overlapping responsibilities.
That complexity was itself part of the problem.
Safety Culture and Operational Pressure
One of the most important lessons from Deepwater Horizon concerns the difference between occupational safety and major accident risk.
A workplace can have good statistics for slips, trips and minor injuries while still carrying enormous uncontrolled process risks.
Before the disaster, Deepwater Horizon had received recognition for aspects of its safety performance.
Yet the well below it was moving towards catastrophe.
Investigators later highlighted problems in how major hazards were understood and managed.
Warnings that seemed ambiguous were too easily rationalised.
Decisions that appeared individually manageable accumulated.
Operational efficiency and schedule pressure existed alongside safety considerations.
The system failed to recognise when ordinary work had become extraordinary risk.
Could the Disaster Have Been Prevented?
Yes.
The accident was preventable at several stages.
A successful cement job could have isolated the reservoir.
A properly interpreted negative pressure test could have stopped the temporary abandonment procedure.
Earlier recognition of the influx could have allowed the crew to shut in the well.
A fully effective blowout preventer might have sealed it even after control was lost.
Deepwater Horizon therefore represents a classic multiple-barrier failure.
Each missed opportunity made the next barrier more important.
Eventually, there were no effective barriers left.
The Environmental Impact
The spill affected marine and coastal ecosystems across the Gulf of Mexico.
Birds, dolphins, sea turtles, fish and other species were exposed to oil and chemical dispersants.
Coastal wetlands were contaminated.
Fishing grounds were closed.
Large quantities of dispersant were used both at the surface and underwater in attempts to break up the oil.
The long-term ecological consequences became the subject of extensive scientific study.
Some ecosystems recovered more quickly than initially feared.
Others experienced effects that continued for years.
Determining the full environmental legacy remains complicated because the Gulf is a vast and dynamic ecosystem already exposed to numerous natural and industrial stresses.
The Economic Impact
The spill damaged industries throughout the Gulf Coast.
Commercial fishing was disrupted.
Tourism businesses faced cancellations.
Workers and companies dependent upon offshore activity were affected by regulatory changes and temporary drilling restrictions.
BP established compensation programmes and faced enormous legal claims.
The economic consequences extended far beyond the oil industry itself.
Communities hundreds of miles from the Macondo well felt the effects.
The Investigations
Numerous investigations examined the disaster.
Among the most important was the US National Commission on the BP Deepwater Horizon Oil Spill and Offshore Drilling.
The US Coast Guard, Bureau of Ocean Energy Management, Regulation and Enforcement, Department of Justice and other bodies conducted their own investigations.
The recurring conclusion was that the disaster arose from interacting technical, managerial and regulatory failures.
It was not an unforeseeable event caused by a single freak malfunction.
What Changed Afterwards?
Deepwater Horizon led to major changes in offshore regulation and industry practice.
The former Minerals Management Service was reorganised.
New requirements were introduced relating to well design, blowout preventers, emergency procedures and independent verification.
Operators reassessed their ability to contain deepwater blowouts.
Industry organisations developed new subsea containment systems that could be deployed during future incidents.
Yet regulation alone cannot eliminate risk.
The deeper lesson remained cultural: warning signs must be treated as evidence to investigate rather than inconvenient anomalies to explain away.
Why Does Deepwater Horizon Still Matter?
Deepwater Horizon remains important because the disaster was not caused by technology nobody understood.
The industry understood well control.
It understood cement barriers.
It understood negative pressure testing.
It understood blowout preventers.
What failed was the system that connected those safeguards.
Warnings were misinterpreted.
Assumptions were accepted.
Barriers failed.
And once the hydrocarbons reached the rig, events moved faster than the people aboard could recover.
The catastrophe therefore remains relevant far beyond offshore drilling.
It demonstrates how experienced professionals working within sophisticated organisations can gradually normalise risk until the final warning arrives too late.
Frequently Asked Questions
When did Deepwater Horizon explode?
The explosions occurred on the evening of 20 April 2010.
Where was Deepwater Horizon?
The rig was drilling the Macondo well in the Gulf of Mexico, approximately 41 miles off the Louisiana coast.
How many people died?
Eleven workers were killed.
Who owned Deepwater Horizon?
The rig was owned by Transocean.
Who operated the Macondo well?
BP was the well operator.
What caused the disaster?
The blowout resulted from multiple failures including an ineffective cement barrier, misinterpretation of a negative pressure test, failure to recognise hydrocarbons entering the well and failure of the blowout preventer to seal it.
How long did the oil spill continue?
Oil flowed from the Macondo well for 87 days.
How much oil was released?
US government estimates concluded that approximately 4.9 million barrels escaped from the reservoir, although some oil was captured before reaching the Gulf.
Why didn’t the blowout preventer work?
Investigators determined that drill pipe inside the BOP had buckled and moved away from the position necessary for the blind shear ram to cut and completely seal the well.
When was the Macondo well finally sealed?
The well was declared effectively dead on 19 September 2010.
Read the Full Book
For a deeper examination of the decisions, warning signs, technical failures and human consequences behind the Deepwater Horizon catastrophe, read the full investigation by Bill Stewart.
Available on Amazon.
https://www.amazon.com/dp/B0H6T55NX7
Read More
Explore more What Happened? investigations on Billy’s Book Club, examining maritime disasters, aviation accidents, spaceflight tragedies, industrial catastrophes and historical events where a chain of seemingly manageable decisions ended in disaster.
About the Author
Bill Stewart is an author and former seafarer whose career included service in the Royal Navy and Merchant Navy, followed by work in marine auditing and accident investigation.
His nonfiction writing examines major disasters, unexplained events, intelligence operations and historical investigations, with particular emphasis on separating documented evidence from speculation.
His books and What Happened? Investigation Pages form part of the nonfiction archive at Billy’s Book Club — Books Worth Talking About.