Aircraft maker Boeing has admitted that a key sensor malfunctioned on an Ethiopian Airlines flight which crashed last month, killing all on board.
A preliminary report from the Ethiopian government said the pilots followed Boeing’s recommended procedures when the plane started to nose dive – but could not avoid crashing.
The findings draw the strongest link yet between the March 10 crash in Ethiopia and an October crash off the coast of Indonesia, which both involved Boeing 737 Max 8 planes.
All 346 people on the two planes were killed.
Both planes had an automated system that pushed the nose down when sensor readings detected the danger of an aerodynamic stall, and it now appears that sensors malfunctioned on both planes.
Boeing acknowledged that the sensor malfunctioned and CEO Dennis Muilenburg said a software update would prevent future incidents.
“It’s our responsibility to eliminate this risk,” Mr Muilenburg said in a video statement. “We own it, and we know how to do it.”
Thursday’s preliminary report, based on flight data and cockpit voice recorders on the Ethiopian Airlines jet, showed that the faulty sensor touched off a series of events that caused the pilots to lose control of the plane.
The report from Ethiopia’s Aircraft Accident Investigation Bureau said the sensor problems began about a minute after the plane was cleared for takeoff.
It said air speed and altitude values on the left side of the Ethiopian Airlines 737 Max conflicted with data from the right sensor, causing flight control problems.
Eventually the pilots could not keep the plane from plummeting to the ground, killing all 157 people on board.
The problems are similar to those reported on the Indonesian Lion Air flight that crashed last October.
Investigators found that software on that plane took readings from the sensor and pointed the nose down.
Thursday’s revelations raise questions about repeated assertions by Boeing and US regulators that pilots could regain control in some emergencies by following steps that include turning off an anti-stall system designed specifically for the Max, known by its acronym, MCAS.
The Max has been grounded worldwide pending a software fix that Boeing is rolling out, which still needs to be approved by the US Federal Aviation Administration and other regulators.
In a statement, Boeing said that to make sure unintended activation of the MCAS system does not happen again, it is developing software and “associated comprehensive pilot training” for the Max.
The software update, Boeing said, adds layers of protection and will stop erroneous data from activating the system.
Ethiopian investigators did not specifically mention the MCAS, but recommended that Boeing review “the aircraft flight-control system related to the flight controllability”.
They also recommended that aviation officials verify that issues have been adequately addressed before allowing the planes to fly again.
At a news conference, Ethiopia’s Minister of Transport Dagmawit Moges said the Ethiopian Airlines crew “performed all the procedures repeatedly provided by the manufacturer but was not able to control the aircraft”.
However, it was not clear whether the Ethiopian pilots followed Boeing’s recommendations to the letter.
The pilots initially followed Boeing’s emergency steps by disconnecting the MCAS system by switching off power to a stabiliser on the tail, the report said.
But they turned the system back on 32 seconds before hitting the ground and tried unsuccessfully to use it to point the nose up.
Boeing’s procedures instruct pilots to leave the MCAS disconnected and continue flying manually for the rest of the flight.
The report said multiple alarms went off as the pilots struggled to control the plane, indicating an even more complex situation than in the Lion Air crash, said William Waldock, a professor of safety science at Embry Riddle Aeronautical University.
“It’s similar in a lot of ways but perhaps more extreme,” he said. “It seems likely they’ve got more things going on at once in a shorter time period.”
The two pilots had just 159 hours of combined flying time on the Boeing 737 Max, a new aircraft that went into service in 2017.
The 29-year-old captain had more than 8,000 flight hours overall, including more than 1,400 on older 737s, the report said.
The 25-year-old co-pilot had only 361 total flight hours — not enough to be hired as a pilot at a US airline. He flew 207 of those hours on 737s, including 56 hours on Max jets.