← back to the index
FR-014 fatigue fracture 1973

Markham Colliery 1973 — A Fatigue-Cracked Brake Rod Sent a Pit Cage Plunging

cyclic-fatiguereversing-load-misdesignsafety-critical-rod-fracturebrake-actuating-rodmine-winding-system1970s
Death toll
18 dead; 11 seriously injured (plus 1 rescuer)
Structure
No. 3 shaft winder, brake-actuating spring-nest centre rod, Markham Colliery, Staveley, Derbyshire
Failed
30 July 1973, ~05:35
Status
Broke up

Summary

At about 05:35 on Monday 30 July 1973, a manriding cage carrying 29 men down the 1,407-foot No. 3 shaft at Markham Colliery, near Staveley in Derbyshire, ran away in its final descent and struck the pit bottom at roughly 27 miles per hour; 18 men were killed and 11 more were seriously injured, in the worst British colliery shaft accident since nationalisation. The cause was not a winding-rope failure, not engineman error, and not overwind. It was a single fatigue crack that had grown over 21 years through a two-inch steel rod at the heart of the winder's mechanical brake — a rod that, when the crack reached critical size, parted in two and left the engineman with no brake at all.

The broken component was the centre rod of the spring nest in the post-brake gear: the link that transmitted the spring force which clamped the brake shoes onto the winding drum. On paper the rod was robust. It was carbon steel (grade En8 to British Standard 970:1947), two inches in diameter, and carried a factor of safety of 6.1 against the direct tensile load it was assumed to see. The forensic finding of the public inquiry was that the rod never saw only that tensile load. Friction at the trunnion bearing, where the main brake lever should have rotated freely, instead jammed the lever and forced the rod to flex on every brake application. Strain-gauge work after the disaster showed that at one end the stress swung clean through zero — from tension to compression — each time the brake was set and released. The rod was a static tension member that had been quietly carrying a reversing bending load for two decades.

That reversing load is the raw material of fatigue. Every cage trip cycled the stress; tens of millions of cycles drove a crack from a surface initiation point inward, undetectable by any visual inspection of the assembled brake gear. On the morning of 30 July the crack reached the length at which the remaining sound metal could no longer carry the load, and the rod failed in two pieces. The engineman applied the brake lever, increased the regenerative (electrical) braking, and finally hit the emergency stop; none of it answered, because the one mechanical path that converted his commands into shoe pressure had severed. The cage accelerated under the weight of its descending side and crashed into the landing baulks at the pit bottom. The official report, by J. W. Calder, HM Chief Inspector of Mines and Quarries, presented in March 1974, named the mechanism precisely: a fatigue fracture of a single, non-duplicated, safety-critical rod loaded in a way its designers never analysed. The fault was not bad steel; it was a brake architecture in which one slender link, subject to an unrecognised cyclic stress and hidden inside the gear, could fail and take the entire braking system with it.

Timeline

1952 (approx.)
The rod enters service
The No. 3 shaft winder is fitted with its post-brake spring-nest gear, including the two-inch En8 carbon-steel centre rod that transmits the spring clamping force. The rod is sized for the direct tensile load with a factor of safety of 6.1; reversing bending is not part of the design case.
1952–1973
Twenty-one years of cycling
Every cage trip applies and releases the brake. Trunnion friction prevents the main lever from rotating freely, so each application flexes the rod; the stress at one gauge position swings from tension into compression. The rod accumulates tens of millions of reversing load cycles.
1960s–1973
A crack initiates and grows
A fatigue crack starts at the rod surface and propagates inward, advancing imperceptibly per cycle. The assembled brake gear is inspected, but the crack is internal to the loaded rod and gives no external sign detectable by the inspection regime in force.
1973-07-30, before 05:35
Final manwinding descent begins
The cage, carrying 29 men on a shift change, starts its descent of the 1,407-foot No. 3 shaft under the control of the winding engineman.
1973-07-30, ~05:35
The engineman sees sparks
Beginning to retard the descent, the winding engineman notices sparks beneath the brake cylinder. He immediately increases the regenerative (electrical) braking and pulls the mechanical brake lever to the "on" position.
1973-07-30, ~05:35
The rod parts; the brake is gone
The fatigue crack reaches critical length and the centre rod fractures into two pieces. With the spring-force path severed, the shoes cannot clamp; the mechanical brake is wholly ineffective. The engineman presses the emergency stop. It has no effect.
1973-07-30, ~05:35
Impact at the pit bottom
The unbraked cage accelerates and strikes the wooden landing baulks at the bottom of the shaft at about 27 mph. Eighteen men are killed; 11 are seriously injured. A rescue worker is also seriously hurt in the response.
1973-12-03
National Committee for Safety of Manriding formed
In direct response, a national committee is established to review the safety of men riding in shafts and unwalkable outlets across the coalfields.
1974-03-06
The Calder report is presented
J. W. Calder, HM Chief Inspector of Mines and Quarries, reports that the brake failed because the spring-nest centre rod fractured from fatigue, driven by reversing bending stresses the rod was never designed to carry.
1974 onward
Brake systems overhauled
The National Coal Board revises winder braking design and inspection: duplication of single-line components, periodic non-destructive testing of safety-critical brake parts, and arrestor gear at the shaft bottom to replace solid landings.

The Build — One Rod, One Path, One Hidden Load

A mine winder brake is a deceptively simple machine guarding a lethal one. The winding drum hauls cages up and down a deep shaft on steel ropes; a powerful mechanical brake, held on by stacked springs, clamps shoes onto the drum to hold or stop the load. At Markham's No. 3 shaft the spring force was transmitted through a "spring nest" whose centre rod was the structural spine of the whole arrangement — a two-inch bar of En8 carbon steel that carried the clamping load from the springs to the brake lever. The designers treated that rod as a tension member, sized it against the direct pull it would experience, and gave it a factor of safety of 6.1. By the arithmetic of static tension it was six times stronger than it needed to be.

The arithmetic was answering the wrong question. The brake lever pivoted on a trunnion bearing meant to let it rotate freely as the brake was set and released. It did not. Friction at the trunnion resisted that rotation, so instead of swinging cleanly the lever bound, and the binding forced the centre rod to bend a little on every application — no longer purely in tension, but in tension plus an alternating bending moment. Post-accident strain gauging quantified what two decades of operation had been doing: at the gauge position farthest from the drum, the stress changed sign — tension on application, compression on release — a full reversing cycle once per brake event. A factor of safety of 6.1 against static tension says nothing about endurance under reversing bending, because fatigue is governed not by how far the stress sits from yield but by how many times it cycles and how high its alternating component climbs. The rod had ample margin against the load it was designed for and none against the load it actually carried. The design error was the omission of the reversing bending case entirely; the trunnion friction that produced it was an unrecognised mechanism in plain sight.

The Failure Sequence — A Sign-Change Stress and a Single Line

By the summer of 1973 the rod had absorbed 21 years of those reversing cycles. A fatigue crack had initiated at the surface and propagated inward, ring by microscopic ring, through metal that looked entirely sound from the outside. Crucially, the crack lived inside an assembled brake mechanism: the inspection routine could confirm the gear was present and functioning, but it could not see a part-through crack in the body of the centre rod, and nothing in the regime called for the rod to be removed and tested. The failure was therefore not a sudden overload but the terminal stage of a long, silent process — high-cycle fatigue reaching critical crack length in a component no one was watching at the right scale.

On the descent of 30 July the engineman began to retard the cage and saw sparks under the brake cylinder — the first and only warning, arriving with no time to use it. He increased the regenerative braking and pulled the mechanical brake to "on." At or about that moment the crack reached critical length and the centre rod broke into two pieces. With the rod severed, the spring force had no path to the shoes; the mechanical brake, the primary means of holding the winder, was instantly and completely gone. The emergency stop could do nothing, because every command still relied on the same broken link to produce shoe pressure. There was no second, independent rod to take up the load — the brake was a single line, and the line had parted. Driven by the imbalance of the descending cage, the winder ran away and the cage struck the landing baulks at the pit bottom at roughly 27 mph. Eighteen of the 29 men aboard were killed and 11 seriously injured. The lethality flowed from two compounding facts: a fracture that removed the brake, and a shaft bottom fitted with solid landings rather than energy-absorbing arrestor gear that might have decelerated an unbraked cage.

The Reckoning — A Mechanism Named, a System Rebuilt

The investigation under J. W. Calder, HM Chief Inspector of Mines and Quarries, reconstructed the fracture from the recovered rod and from strain measurements made on the rebuilt gear. The conclusion was clinical: the brake had failed because the spring-nest centre rod had fractured from fatigue, and that fatigue had been driven by reversing bending stresses introduced by trunnion friction — stresses the rod had never been designed to carry. The brief speculation that the disaster was a winding fault or a control failure was retired. The ropes were intact; the engineman's actions were correct and timely; the controls did what they were told. The single mechanical link they all depended on had simply broken.

What the report exposed beyond the broken rod was an architecture of single-line dependency. The entire mechanical brake — the device standing between a loaded cage and a 1,400-foot drop — hung on one unduplicated rod whose governing load case had been mis-specified and whose fatigue crack was invisible to the inspections actually performed. The remedy was therefore systemic rather than metallurgical. The National Committee for Safety of Manriding, established within months of the disaster, and the National Coal Board's subsequent engineering reforms attacked the structure of the failure: eliminate or duplicate single-line safety-critical components so that no one fracture disables a brake; subject critical brake parts to periodic non-destructive testing so that a growing crack is found before it reaches critical size; and fit arrestor gear at the shaft bottom in place of solid landings so that an unbraked cage meets an energy-absorbing barrier rather than a wall. The mechanism was understood completely, and the response rebuilt the system that had allowed one rod to kill 18 men.

Contributing Factors

01
The governing load case was never analysed
The rod was sized as a static tension member with a factor of safety of 6.1, while the load that actually broke it was a reversing bending stress that swung from tension to compression on every brake cycle. A high safety factor against the wrong load is a false comfort; design margin must be computed against the load the part will truly experience, including the secondary moments introduced by the rest of the mechanism.
02
Trunnion friction created an unrecognised cyclic load
Because the trunnion bearing did not let the brake lever rotate freely, each application bent the rod that should only have been pulled. The very joint meant to relieve the rod instead fed it an alternating bending moment. Friction, binding, and misalignment in adjacent components can convert a benign static load into a fatigue-driving cyclic one; a part cannot be qualified in isolation from the kinematics around it.
03
A single-line safety-critical component had no backup
The whole mechanical brake depended on one unduplicated rod. When it fractured, the brake was gone — no redundant path, no second link, no fail-safe to take up the load. Any element whose single failure disables a life-safety function must be duplicated, made fail-safe, or monitored continuously; a brake should not have a fracture point that ends braking.
04
The crack was invisible to the inspection regime
A fatigue crack grew for years inside an assembled brake mechanism, undetectable by the visual checks performed and never exposed because the rod was not removed or tested. Inspections that confirm a part is present and functioning do not find a subsurface crack; safety-critical components under cyclic load need scheduled non-destructive testing matched to the failure mode, not just functional checks.
05
A solid shaft bottom offered no second line of defence
An unbraked cage met fixed wooden landing baulks rather than energy-absorbing arrestor gear, ensuring a high-speed impact. Defence in depth assumes the primary barrier — an intact brake — will sometimes fail, and provides a second barrier that limits the consequence; the absence of arrestor gear converted a brake failure into a fatal impact.

Aftermath

The toll — 18 dead and 11 seriously injured, with a rescue worker also gravely hurt — made Markham 1973 the deadliest British colliery shaft accident of the nationalised era, in a pit whose name already carried the memory of earlier disasters underground. The response was immediate and structural. The National Committee for Safety of Manriding, formed on 3 December 1973, reviewed winding and manriding practice across the coalfields, and the National Coal Board overhauled winder braking on the principles the Calder report implied: no single-line dependency in a life-safety brake, periodic non-destructive testing of critical brake components so a fatigue crack is caught before critical size, and arrestor gear at shaft bottoms in place of solid landings. The case entered British engineering teaching as a textbook example of fatigue under reversing bending and of the danger of a generous safety factor computed against the wrong load. In the memory of mining and materials engineering, "Markham" became the byword for a hidden fatigue crack in a single, mis-specified, safety-critical link — a brake undone not by a weak material but by a load no one had thought to count.

Lessons

  1. Compute margin against the real load, not the assumed one: before trusting a safety factor, identify every load the component will see in service — including secondary bending and reversing stresses from the surrounding mechanism — because a factor of 6 against the wrong load is a factor of zero against the right one.
  2. Trace the kinematics for hidden cyclic stresses: when a joint, bearing, or trunnion can bind or resist motion, check whether it converts a static member into a fatigue-loaded one, and qualify each part within the moving assembly it actually inhabits.
  3. Never let one fracture end a life-safety function: duplicate, make fail-safe, or continuously monitor any single-line component whose failure disables a brake, hoist, or restraint, so that no single crack can remove the protection entirely.
  4. Match inspection to the failure mode: for safety-critical parts under cyclic load, schedule non-destructive testing that can find a subsurface crack before it reaches critical size, because confirming that a component is present and working will never reveal the crack growing inside it.
  5. Build the second barrier for when the first fails: assume the primary safeguard will occasionally break, and provide an energy-absorbing backstop — arrestor gear, run-off, overspeed trip — so that a failure becomes an incident rather than a fatality.

References