On 10 January 1954, twenty minutes out of Rome and climbing through roughly 27,000 feet, BOAC Comet G-ALYP — the world’s first jet airliner in scheduled service — broke apart over the Tyrrhenian Sea near Elba; all 35 aboard died. Eighty-nine days later, on 8 April 1954, after the type had been cleared back to service, South African Airways’ Comet 1 G-ALYY disintegrated in almost identical circumstances while climbing through about 35,000 feet near Naples, killing all 21. Fifty-six people died in the two events. The cause was neither weather, sabotage, nor the engines the press first blamed: it was high-cycle fatigue — a crack that grew, pressurization cycle after pressurization cycle, from the corner of a cutout in the cabin skin until the fuselage unzipped at altitude.
The mechanism was proven by experiment. The Royal Aircraft Establishment (RAE) at Farnborough sealed a sister airframe, G-ALYU, inside a purpose-built water tank and repeatedly cycled the cabin from flight pressure and back. On 24 June 1954, after 3,057 simulated flights, the fuselage burst, the fatigue crack starting at the corner of a window cutout exactly as the recovered Elba wreckage would confirm.
The popular memory fixed on the square passenger windows, and that shorthand is half right and half myth. The cabin windows were indeed unforgiving rectangles whose corners concentrated stress, but the fatal crack on the tested airframe and on G-ALYP began at the rivet-pierced corner of a different opening — the aperture for the Automatic Direction Finder (ADF) antenna on the upper fuselage. The skin was thin, the corners sharp, and the holes around them punch-riveted rather than drilled, leaving microscopic cracks before the aircraft ever flew. The result was a stress concentration far higher than de Havilland’s calculations admitted, in a structure cycled to full pressure on every flight, with no full-scale fatigue test to expose it first. The Court of Inquiry under Lord Cohen and the RAE’s analysis turned the Comet from a national triumph into the founding case study of aircraft fatigue: Britain’s airworthiness code was rewritten to demand full-pressure-cabin fatigue testing, the Comet was redesigned with oval windows and thicker skin, and the discipline of damage tolerance grew from the wreckage off Elba.
At 13:46 Hawaii time on 28 April 1988, Aloha Airlines Flight 243 — a 19-year-old Boeing 737-297 climbing through 24,000 feet between Hilo and Honolulu — suffered an explosive decompression in which roughly 18 feet of the upper fuselage skin and structure peeled away in flight; chief flight attendant Clarabelle “C.B.” Lansing was swept overboard and never recovered, eight people were seriously injured, and the cause was not a bomb, a bird, or pilot error but fatigue cracking and crevice corrosion that had linked along a cold-bonded lap joint until the cabin tore open like a tin. The aircraft, registration N73711, had flown about 89,680 pressurization cycles — among the highest of any 737 in service — on Aloha’s short inter-island hops, and each cycle had loaded the joint that failed.
The fracture began at the longitudinal lap joint along stringer S-10L, on the upper row of rivets where the upper fuselage skin overlaps the lower. The joint had been assembled with a cold-bonded epoxy-scrim adhesive intended to share the pressurization load across the bonded area rather than through the rivets alone. When that bond disbonded — a known defect in early 737 production — salt-laden humid air entered the gap, crevice corrosion attacked the faying surfaces, and the entire hoop load funneled into the rivet holes. There, the countersunk “knife-edge” rivet design left a thin, sharp lip of metal at each hole, an ideal site for fatigue cracks to initiate. Cracks formed at many adjacent holes at once.
This was multiple-site damage: not one large crack growing slowly toward a detectable size, but dozens of small subcritical cracks, each individually below the inspection threshold, growing in parallel along the rivet row. When the ligaments between them failed, the cracks linked instantaneously into a single running fracture and a “flap” of fuselage unzipped. The National Transportation Safety Board, in report AAR-89/03, fixed the probable cause as the failure of Aloha’s maintenance program to detect the disbonding and fatigue damage at S-10L — a detection failure, not merely a structural one. The metal had behaved exactly as fracture mechanics predicted; the system meant to catch it had not. Inspections ran at night under poor lighting, crews were untrained to find disbonds, a Boeing service bulletin and an FAA Airworthiness Directive on the books had a scope too narrow to mandate the joint that failed, and a passenger had seen a crack while boarding and said nothing. Aloha 243 became the founding case of the aging-aircraft era in commercial aviation.
At 15:16 on 19 July 1989, cruising near 37,000 feet over north-central Iowa, the tail-mounted No. 2 engine of United Airlines Flight 232 — a McDonnell Douglas DC-10-10 carrying 296 people from Denver to Chicago — disintegrated without warning; 44 minutes later the crippled airliner broke up on landing at Sioux Gateway Airport, killing 112 and leaving 184 alive. The cause was not bird strike, pilot error, or fire. It was a single high-cycle fatigue crack that had grown for years from a metallurgical defect buried in the bore of one titanium fan disk, until the disk burst and threw high-energy fragments through every hydraulic line on the aircraft at once.
The disk was the stage-1 fan rotor of a General Electric CF6-6D turbofan, a forged Ti-6Al-4V component roughly a metre across spinning at takeoff and climb power. Embedded in its bore, dating to the original titanium melt, was a “hard-alpha” inclusion — a brittle, low-ductility region where the casting had absorbed roughly 2.07 percent nitrogen by weight against a specified maximum near 0.02 percent. Sitting in the most highly stressed part of the disk, around a tiny cavity within it a fatigue crack initiated and crept outward, one spin-up and spin-down at a time, through some 17,000 flight cycles of revenue service.
Because the DC-10’s three independent hydraulic systems all routed lines through the tail in the arc swept by a bursting tail engine, the uncontained debris severed all three at once and drained every drop of fluid. The crew — captain Alfred Haynes, first officer William Records, second officer Dudley Dvorak, and off-duty check airman Dennis Fitch, who worked the wing throttles by hand — flew an aircraft with no working flight controls to a runway on differential thrust alone. The forensic verdict in NTSB report AAR-90/06 was unambiguous: a fatigue fracture from a hard-alpha inclusion, missed by six successive fluorescent-penetrant inspections, compounded by hydraulic architecture with no protection against a total loss. The survival of 184 of 296 was attributed almost entirely to the airmanship of a crew flying a configuration the manufacturer had never deemed survivable.
At about 13:30 on 27 December 1965, roughly 43 miles east of the Humber in the southern North Sea, BP’s drilling barge Sea Gem — Britain’s first offshore oil rig, the platform that had struck the country’s first North Sea gas only weeks earlier — collapsed and capsized as its crew jacked the hull down to float it off for a move to a new location. Two of the ten supporting legs buckled, the deck tilted and broke up, and 13 of the 32 men aboard were killed; 19 were rescued. The Ministry of Power tribunal of inquiry found the prime cause to be the failure of the steel tie-bars in the suspension system that linked the hull to its legs — a failure rooted in fatigue cracking and brittle fracture, not in storm, blowout, or human handling on the day.
Sea Gem was not a purpose-built rig. She was a 5,600-ton flat-bottomed steel barge that BP had converted in 1964 by welding on ten tubular legs, a jacking system, a helideck, accommodation, and a drilling derrick — an improvised self-elevating platform assembled at speed to get a British operator drilling ahead of rivals. The legs did not carry the hull directly: at each leg the barge hung from a yoke restrained by paired steel tie-bars, and it was these tie-bars, cycled by every jacking operation and by the working of the hull in a seaway, that carried the suspension load. The forensic finding was that they failed by fracture. The recovered evidence pointed, in the tribunal’s words, “irresistibly” to the tie-bars as the initiators: cracks had grown under cyclic load and corrosion, and the steel — loaded in the cold of a December North Sea — fractured in a brittle, fast-running mode rather than yielding.
The collapse was not the first sign. On 23 November 1965, more than a month before the disaster, two tie-bars on one leg had already snapped and been replaced; the warning was treated as a maintenance event rather than as evidence of a systemic fracture problem. The inquiry, appointed in February 1967, sat for 29 days and reported on 26 July 1967. It criticised the design and fabrication of parts of the structure and found the requirements of the Institute of Petroleum’s code unobserved in several important particulars. Its deeper conclusion was institutional: there was no statutory regime governing the safety of offshore installations on the UK continental shelf. That gap was closed by the Mineral Workings (Offshore Installations) Act 1971, the founding statute of British offshore safety regulation, which the Sea Gem inquiry directly prompted.