CRUDE UNIT EXPLOSION — PROCESS PIPE FAILURE — SMALL REFINERY
Silver Eagle Refining Crude Unit Explosion
Silver Eagle Refining, Inc.
📍 Woods Cross, UT
Incident: November 4, 2009  •  CSB Report: 2012
0
Fatalities
Crude Oil / Hydrocarbon Vapors (Crude Unit Process Pipe Failure — Flammable Vapor Cloud Explosion)
Chemical Involved
6
CSB Recommendations
📋 Incident Summary

On November 4, 2009, an explosion at the Silver Eagle Refining refinery in Woods Cross, Utah, injured three workers and caused significant property damage. The explosion originated in the crude oil distillation unit when a process pipe failed, releasing flammable hydrocarbon vapors that formed a vapor cloud and ignited.

Silver Eagle Refining was a small independent refinery. The CSB investigation identified deficiencies in the facility's mechanical integrity program for process piping, specifically the lack of adequate corrosion monitoring and inspection for the crude unit piping that failed.

The incident illustrates the challenges facing small and independent refineries in implementing comprehensive PSM programs, and the specific mechanical integrity risks associated with crude unit process piping in corrosive hydrocarbon service.

🔎 Key Findings
Finding 01
Process Pipe Failed in Crude Unit — Flammable Vapor Cloud Formed
A process pipe in the crude distillation unit failed, releasing flammable hydrocarbon vapors. The vapors formed a vapor cloud that ignited, causing an explosion and fire.
Finding 02
Inadequate Corrosion Monitoring for Crude Unit Piping
Silver Eagle's MI program did not include adequate corrosion monitoring and thickness measurement for crude unit process piping. Corrosion progressed to failure without detection by the inspection program.
Finding 03
Small Refinery MI Program Deficiencies
The CSB investigation highlighted challenges faced by small and independent refineries in implementing comprehensive PSM mechanical integrity programs, including limited resources for specialized inspection activities.
Finding 04
No Fatalities — Three Workers Injured
Three workers were injured in the explosion. The absence of fatalities was fortunate given the scale of the vapor cloud explosion in an operating crude distillation unit.
Finding 05
Crude Unit Piping Presents Corrosion Hazards Requiring Specific MI Attention
Crude unit process piping is subject to multiple corrosion mechanisms — sulfidic corrosion, naphthenic acid corrosion, HCl/H₂S corrosion — that require damage mechanism-specific inspection approaches.
🔍 Root Causes
1
Corrosion in Crude Unit Piping Not Detected by Inspection Program
The pipe that failed had been corroding due to crude unit-specific corrosion mechanisms. The MI program's inspection methods and frequency were not adequate to detect the advancing corrosion before failure.
2
Damage Mechanisms for Crude Unit Piping Not Fully Characterized in PSI
Process safety information for the crude unit did not fully characterize the corrosion damage mechanisms applicable to the unit's piping, preventing the development of an inspection program matched to the actual degradation mechanisms.
☑ CSB Recommendations
→ Silver Eagle Refining / Small Refineries
Implement a damage mechanism-based inspection program for crude unit process piping; develop PSI that documents the specific corrosion mechanisms applicable to each crude unit piping circuit; conduct corrosion monitoring at appropriate frequencies for each identified damage mechanism.
→ API / Refining Industry
Provide guidance and resources specifically designed for small and independent refineries on implementing adequate MI programs for crude unit piping; address the corrosion mechanisms specific to crude unit service environments.
→ OSHA
Conduct targeted PSM enforcement at small and independent refineries; evaluate MI program adequacy for crude unit process piping with specific attention to corrosion monitoring and damage mechanism characterization.
💡 Lessons Learned
Crude unit process piping is not generic piping — it is subject to specific, chemistry-driven corrosion mechanisms (sulfidic, naphthenic acid, chloride, hydrogen) that vary by crude slate, temperature, and process chemistry. A generic inspection schedule for "process piping" that does not differentiate by damage mechanism will not detect crude unit corrosion before it reaches failure. MI programs for crude unit piping must be built around damage mechanism assessment, not arbitrary time intervals.
Small refineries face real resource constraints in implementing comprehensive MI programs. But the physical hazard of a crude unit vapor cloud explosion does not scale with refinery size — a small refinery has the same physics as a large one when it comes to flammable vapor release and explosion consequence. Resource constraints do not reduce the hazard; they increase the importance of prioritizing MI resources on the highest-consequence failure scenarios.
Mechanical integrity programs must be based on PSI that accurately documents the damage mechanisms applicable to each equipment circuit. If PSI does not specify the damage mechanisms for crude unit piping, the inspection program cannot be designed to detect those mechanisms. PSI for process piping is not just design specifications and material grades — it must include damage mechanism assessment that drives inspection program design.
MI: Mechanical IntegrityPSI: Process Safety InformationPHA: Process Hazard AnalysisSOP: Operating Procedures
🔨 Safety Meeting Toolbox Talk
►Has your facility conducted a damage mechanism assessment for all crude unit (or equivalent high-temperature hydrocarbon service) process piping circuits? Does your MI inspection program address each identified damage mechanism with an appropriate inspection method and frequency?
►Does your PSI for crude unit piping document the specific corrosion mechanisms applicable to each circuit — sulfidic corrosion, naphthenic acid attack, HCl/H₂S corrosion — or does it only document design specifications and material grades?
►When was the last corrosion rate assessment conducted for your crude unit process piping? Are thickness monitoring points covering the highest-risk locations for each applicable damage mechanism?
Immediate Action Items
✓Conduct a damage mechanism assessment for crude unit and equivalent high-temperature hydrocarbon service piping; document findings in PSI and use results to design inspection program for each circuit.
✓Verify that inspection point coverage for crude unit piping includes the highest-risk locations for sulfidic corrosion, naphthenic acid attack, and other applicable damage mechanisms.
✓Update inspection frequencies for crude unit piping circuits based on current corrosion rate measurements and damage mechanism assessment.
✓Review PSI for crude unit piping to confirm damage mechanisms are documented alongside design specifications and material grades.
🔗 PSM Failures Behind This Incident

This incident traced to breakdowns across 4 PSM elements (MI · PSI · PHA · SOP). Each represents a documented gap that process safety documentation and consulting can close before a similar event occurs at your facility.

Mechanical Integrity (MI)
Equipment must be designed, inspected, and maintained to operate safely in its intended service. Mechanical integrity failures — degraded equipment, missed inspections, deferred repairs — contributed to loss of containment here.
Supporting documents in our library →
Process Safety Information (PSI)
Accurate, complete Process Safety Information is the foundation every other PSM element depends on. When PSI is missing or wrong — chemistry data, equipment specs, P&IDs — the entire hazard analysis is built on a flawed base.
Supporting documents in our library →
Process Hazard Analysis (PHA)
A structured PHA or HAZOP study exists to identify exactly these scenarios before they occur. When PHA is absent, superficial, or overdue for revalidation, hazards operate unseen until they kill someone.
Supporting documents in our library →
Operating Procedures (SOPs)
Operators cannot reliably hold safe operating limits without clear, current, enforced procedures. Deviation from acceptable operating conditions — a root cause here — is a direct consequence of SOP failure.
Supporting documents in our library →
Process Safety Management Consulting & Document Library
📂
PSM Document Library
32 ready-to-deploy PSM documents covering all 14 OSHA elements — procedures, checklists, and audit templates built for facilities operating under 29 CFR 1910.119.
Browse the Library →
📊
Free PSM Health Score
Find out where your PSM program stands across all 14 OSHA elements. Our free health score surfaces your biggest gaps in under 10 minutes — no account required.
Check Your Score →
📞
Consulting Services
PHA facilitation, PSM program builds, compliance audits, and OSHA inspection support. Transparent flat-fee pricing — no retainer required to get started.
View Pricing →
📋 Explore the full incident library: All 132 CSB Case Studies →