Caribbean Petroleum Corporation Tank Overfill Explosion and Fire

📋 Incident Summary

On October 23, 2009, a 5-million-gallon atmospheric storage tank at the Caribbean Petroleum Corporation (CAPECO) terminal in Bayamón, Puerto Rico, overflowed during a barge-to-tank gasoline transfer, releasing a massive quantity of gasoline that formed a vapor cloud extending across the tank farm. The vapor cloud ignited in the wastewater treatment area, triggering a flash fire and explosion that propagated through the tank farm. Twenty-one of forty tanks at the facility eventually exploded, with the fires burning for more than two days.

The pressure wave from the explosions damaged hundreds of homes and businesses up to 1.25 miles from the facility. Neighboring communities were evacuated and gasoline contaminated nearby wetlands. There were no fatalities, but the scale of the disaster — 21 exploding tanks, hundreds of damaged structures, widespread environmental contamination — made it one of the most significant petroleum storage terminal incidents in U.S. history.

The CSB found inadequate overfill prevention safeguards, deficient level detection and alarm systems, and gaps in emergency response that allowed the overfill to continue for approximately 30 minutes before the vapor cloud ignited. The investigation identified regulatory gaps in overfill prevention requirements for petroleum tank terminals.

🔎 Key Findings

Finding 01

Tank 409 Overflowed for 30 Minutes During Barge Transfer — No Automatic Shutoff

Tank 409 at the CAPECO terminal overflowed during a barge-to-tank gasoline transfer for approximately 30 minutes before the released vapor cloud ignited. The facility lacked an automated overfill protection system that would have detected the overflow and automatically stopped the transfer.

Finding 02

21 of 40 Tanks Exploded — Pressure Wave Damaged Structures 1.25 Miles Away

The ignition of the gasoline vapor cloud triggered a catastrophic chain of explosions across the tank farm, ultimately causing 21 of 40 tanks to explode. The pressure wave from the explosions damaged hundreds of homes and businesses up to 1.25 miles from the terminal.

Finding 03

Vapor Cloud Ignited in Wastewater Treatment Area — Not Controlled at Source

After Tank 409 overflowed, the released gasoline generated a large vapor cloud that extended across the tank farm. The cloud reached the wastewater treatment area — outside the primary tank containment area — where it found an ignition source.

Finding 04

Level Detection and Alarm Systems Were Inadequate to Prevent Overfill

The CSB found that the level detection and alarm systems at the CAPECO terminal were inadequate to provide the high-high level alarm and automatic shutoff protection needed to stop a barge transfer before tank overflow. Regulatory requirements for petroleum terminal overfill prevention were insufficient.

Finding 05

Regulatory Gaps in Overfill Prevention Requirements for Petroleum Terminals

The CSB investigation identified significant gaps in federal and Puerto Rico regulatory requirements for overfill prevention at petroleum tank terminals. Existing standards did not mandate automated overfill protection systems equivalent to those required for PSM-covered chemical storage.

🔍 Root Causes

Tank Overfill Occurred Without Automated Safeguard to Stop Transfer

The fundamental cause of the CAPECO incident was a tank overfill that continued for approximately 30 minutes without an automated system to detect the overflow condition and stop the barge transfer. The absence of automatic overfill protection — a high-high level alarm with automatic transfer stop — allowed the spill to develop to catastrophic scale.

Deficient Level Measurement and Alarm System Did Not Alert Operators to Overfill

The CAPECO terminal's level measurement and alarm systems did not provide adequate real-time warning to operators that Tank 409 was approaching overflow. Deficiencies in the level sensing and alarm architecture allowed the overfill to continue undetected.

No Effective Emergency Response to Stop Transfer or Prevent Vapor Cloud Spread

After the overflow began, emergency response measures were not effective in stopping the transfer, containing the released gasoline, or preventing the development of a large vapor cloud that could reach an ignition source.

☑ CSB Recommendations

→ EPA

Revise EPA's Risk Management Program regulations to include requirements for automated overfill protection systems — including high-high level alarms with automatic transfer shutoff — for petroleum product storage tanks above threshold quantities.

→ Caribbean Petroleum Corporation / Industry

Install automated overfill protection systems — including independent high-level, high-high level, and overflow alarms with automatic transfer isolation capabilities — on all atmospheric storage tanks receiving flammable liquid transfers; conduct annual testing and maintenance of all overfill protection components.

→ API / Industry Associations

Revise API standards for petroleum tank terminal overfill prevention to require independent automated overfill protection systems with audible and visual alarms, automatic shutoff, and management of change requirements for any modification to overfill protection systems.

→ OSHA / Puerto Rico Department of Labor

Evaluate PSM standard applicability and enforcement at petroleum tank terminals; conduct outreach and enforcement activities to confirm that facilities with flammable liquid storage above threshold quantities have implemented adequate overfill prevention and emergency response programs.

💡 Lessons Learned

Petroleum storage tank overfills are a well-understood, recurring hazard in the petroleum industry — and overfill prevention is a mature discipline with proven solutions. Automated high-high level alarms with automatic transfer shutoff are standard practice in facilities operating under PSM and RMP. The CAPECO incident demonstrates what happens when those same engineering controls are absent from a facility outside the formal PSM umbrella but with equivalent consequence potential.

A 30-minute overflow of a 5-million-gallon gasoline tank is not a discrete event — it is a progressive escalation of hazard that provides significant time for intervention. The interval between overflow start and ignition is the window for emergency response. When that window closes with no effective action — because level alarms failed or operators did not receive timely warning — the outcome is determined by the size of the vapor cloud that forms, not by any safety system.

Tank explosion domino effects in tank farms can produce consequences that extend far beyond the initial incident location. At CAPECO, one overflowing tank produced a vapor cloud that caused 21 tanks to explode. Tank farm risk assessment must include vapor cloud dispersion modeling and consequence analysis for scenarios that start with a single tank overflow or release — not just for the tank itself, but for what the resulting vapor cloud can ignite in the surrounding facility.

The 1.25-mile damage radius from the CAPECO explosions demonstrates that petroleum tank terminals are community safety matters as much as industrial safety matters. Facilities storing large quantities of flammable liquids near populated areas must account for worst-case community consequence in both their risk management programs and their emergency planning — including coordination with local emergency services for large-scale evacuation.

Regulatory gaps have real consequences. The CAPECO incident occurred, in part, because regulatory requirements for overfill prevention at petroleum terminals were less stringent than those for PSM-covered chemical facilities — despite equivalent or greater consequence potential. Process safety programs should not wait for regulatory requirements to mandate safety measures that established engineering practice already recognizes as necessary.

MI: Mechanical IntegritySOP: Operating ProceduresEP: Emergency PlanningPSI: Process Safety InformationPHA: Process Hazard Analysis

🔨 Safety Meeting Toolbox Talk

►Do your atmospheric storage tanks receiving flammable liquid transfers have independent high-high level alarms with automatic transfer shutoff capability? When were these systems last tested and the test results documented?

►Has your facility conducted a consequence analysis for a large flammable liquid release from your most critical storage tank? Does the analysis include vapor cloud dispersion modeling and identify potential ignition sources within the cloud's reach?

►Has your facility identified and evaluated the domino effect potential if a fire or explosion at one storage vessel could propagate to adjacent tanks? Is tank spacing and fire suppression capability adequate for the identified scenarios?

►Does your emergency plan address large-scale community evacuation for a worst-case flammable liquid release and vapor cloud ignition scenario? Have you coordinated with local emergency management on evacuation routes and notification procedures?

Immediate Action Items

✓Conduct an immediate audit of overfill prevention systems on all atmospheric tanks receiving flammable liquid transfers; confirm that independent high-level and high-high-level alarms with automatic transfer shutoff are in place, tested, and documented.

✓Perform a vapor cloud dispersion consequence analysis for your most critical flammable liquid storage tank; identify ignition sources within the modeled cloud boundary and evaluate whether additional safeguards or separation are required.

✓Review your tank farm emergency response plan for large-scale release scenarios; confirm that procedures address vapor cloud control, evacuation of at-risk areas, and coordination with local emergency response agencies.

✓Include overfill protection system testing as a standing item in your mechanical integrity program; ensure testing records document setpoints, test results, and follow-up actions for any system that fails the test.

🔗 PSM Failures Behind This Incident

This incident traced to breakdowns across 5 PSM elements (MI · SOP · EP · PSI · PHA). Each represents a documented gap that process safety documentation and consulting can close before a similar event occurs at your facility.

Mechanical Integrity (MI)

Equipment must be designed, inspected, and maintained to operate safely in its intended service. Mechanical integrity failures — degraded equipment, missed inspections, deferred repairs — contributed to loss of containment here.

Supporting documents in our library →

Operating Procedures (SOPs)

Operators cannot reliably hold safe operating limits without clear, current, enforced procedures. Deviation from acceptable operating conditions — a root cause here — is a direct consequence of SOP failure.

Supporting documents in our library →

Employee Participation

OSHA PSM requires workers to be meaningfully involved in hazard analyses and procedure development — not just trained on the finished product. Active participation catches gaps that management alone misses.

Supporting documents in our library →

Process Safety Information (PSI)

Accurate, complete Process Safety Information is the foundation every other PSM element depends on. When PSI is missing or wrong — chemistry data, equipment specs, P&IDs — the entire hazard analysis is built on a flawed base.

Supporting documents in our library →

Process Hazard Analysis (PHA)

A structured PHA or HAZOP study exists to identify exactly these scenarios before they occur. When PHA is absent, superficial, or overdue for revalidation, hazards operate unseen until they kill someone.

Supporting documents in our library →

SafeGuard PSM

Process Safety Management Consulting & Document Library

📂

PSM Document Library

32 ready-to-deploy PSM documents covering all 14 OSHA elements — procedures, checklists, and audit templates built for facilities operating under 29 CFR 1910.119.

Browse the Library →

📊

Free PSM Health Score

Find out where your PSM program stands across all 14 OSHA elements. Our free health score surfaces your biggest gaps in under 10 minutes — no account required.

Check Your Score →

📞

Consulting Services

PHA facilitation, PSM program builds, compliance audits, and OSHA inspection support. Transparent flat-fee pricing — no retainer required to get started.

View Pricing →

📋 Explore the full incident library: All 132 CSB Case Studies →