Aircraft Electrical Systems: A320/A321 Briefing

 

Case Study Breakdown: A330 In-Flight Fuel Leak

Introduction: The Hidden Danger

In flight operations, a fuel leak represents a cascading failure risk, introducing the dual threats of in-flight fire and fuel starvation. Managing this threat effectively is not a matter of improvisation but of disciplined adherence to certified procedures. This case study of an A330 fuel leak serves as a critical examination of crew decision-making under pressure and the severe consequences of procedural deviation.

We will proceed chronologically through the incident, analyzing the flight crew's decisions against the standard procedures outlined in their Quick Reference Handbook (QRH). The goal is to extract critical safety lessons for students of flight operations.

--------------------------------------------------------------------------------

1. The First Indication: An "Acceptable" Anomaly

The initial signs of trouble were subtle, masked by the aircraft's own automated systems. The crew's first assessment was reasonable, but it highlighted how a dangerous situation can initially appear benign.

1.1. What Happened (T0 + 35 minutes)

As the A330 reached its cruise altitude 35 minutes after takeoff, the flight crew performed their first routine fuel check. The flight crew's initial fuel check revealed a notable discrepancy between the expected and actual fuel quantities.

• Block Fuel (Initial): 45,600 kg
• Fuel on Board (FOB): 37,680 kg
• Fuel Used (FU): 6,480 kg

This revealed a discrepancy of 1,440 kg when compared to the initial block fuel. However, the lateral fuel imbalance between the main wing tanks was a non-significant 90 kg. The Captain formed an initial hypothesis that attributed the overall discrepancy to the ongoing, normal process of fuel being transferred to the aft trim tank and decided to monitor the situation.

1.2. The Learning Insight: Why Was the Leak Masked?

Standard Operating Procedures (SOPs) mandate regular fuel checks using the (FOB + FU) - BLOCK fuel comparison to catch anomalies. While the crew correctly identified a discrepancy, the true severity was hidden by an automated system.

The A330's fuel system is designed to automatically manage the aircraft's center of gravity. When it detects a fuel imbalance between the main wing tanks of more than 500 kg, it begins transferring fuel from the heavier side to the aft trim tank. In this case, as fuel leaked from the left side, the system compensated by transferring fuel from the right side, effectively masking the growing imbalance. This is why the crew only saw a 90 kg difference, leading to a plausible but ultimately incorrect assessment.

While the crew monitored what they believed to be a minor issue, the hidden leak from the left engine was steadily worsening at a constant rate of approximately 2 tonnes per hour (about 45 liters per minute).

--------------------------------------------------------------------------------

2. Confirmation: The Leak Becomes Obvious

Thirty minutes of monitoring was all it took for the situation to escalate from a minor discrepancy to an undeniable emergency.

2.1. What Happened (T0 + 1 hour 05 minutes)

The crew's next check revealed a dramatic change. The automated systems could no longer mask the scale of the fuel loss.

• Total Fuel Missing: 2,670 kg
• Left Side Imbalance: 780 kg

With this clear evidence of a significant leak on the left side, the flight crew correctly initiated the FUEL LEAK QRH (Quick Reference Handbook) procedure. Their initial actions were in precise accordance with the QRH, designed to isolate the fuel tanks to help pinpoint the source of the leak:

• Maintained the crossfeed valve closed.
• Set L CTR TANK and R CTR TANK pushbutton switches to OFF.
• Set the T TANK FEED selector to ISOL.

Following these initial steps of the formal procedure would soon lead the crew to a critical decision point that would define the rest of the flight.

--------------------------------------------------------------------------------

3. The Critical Juncture: Procedure vs. Decision

This section represents the core of the incident. With the leak confirmed and escalating, the crew faced a procedural requirement that they chose to override, leading to a cascade of consequences.

3.1. What Happened (T0 + 1 hour 31 minutes)

Just 26 minutes after isolating the tanks, the fuel loss and imbalance had grown alarmingly. The aircraft was now missing 3,530 kg of fuel, and the imbalance between the left and right sides had ballooned to 1,770 kg—an increase of nearly a ton in less than half an hour.

3.2. Procedure vs. Action: A Fateful Deviation

The evidence was conclusive: a major leak was occurring on the left side. The QRH procedure for this situation is unambiguous. However, the crew deviated.

QRH Procedure Requirement	Crew's Action
Given the significant and growing fuel imbalance, the procedure required the crew to shut down the affected (left) engine to determine if the leak was from the engine or the wing.	The crew initiated a diversion to a nearby airport but made the decision to keep the left engine running. They stopped following the FUEL LEAK procedure at this step.

3.3. The Learning Insight: The Consequences of Deviation

The engine shutdown step is a critical diagnostic and safety-critical action mandated by the procedure for two primary reasons: to stop a potential engine fire and to confirm the leak's location. If the fuel loss stops after shutdown, the leak is from the engine; if it continues, it's from the wing.

By choosing to keep the engine running, the crew's deviation had four direct and dangerous consequences:

1. High Risk of Fire: Fuel continued to pour from the faulty hose onto hot engine components, creating a significant and persistent risk of an in-flight fire.
2. Continued Fuel Loss: The source of the leak was not contained. Fuel continued to be pumped to the leaking engine and was lost into the atmosphere for the remainder of the flight.
3. Excessive AFT CG: Because the QRH procedure was halted, the fuel tanks remained isolated. This prevented the system from transferring fuel forward from the trim tank, causing the aircraft's Center of Gravity (CG) to shift dangerously aft. The final CG at landing was 39.8%, just shy of the 40.5% threshold that would have triggered a red "EXCESS AFT CG" warning.
4. Environmental Contamination and Airport Disruption: By not containing the leak in-flight, fuel was needlessly lost into the atmosphere. Furthermore, by keeping the engine running on the ground, the crew contaminated the runway, creating a safety hazard and potentially disrupting airport operations.

Despite the crew's decision to deviate from the procedure, the aircraft's systems and other personnel on board would soon provide even more evidence of the clear and present danger.

--------------------------------------------------------------------------------

4. Mounting Evidence: Alerts and Observations

As the flight continued toward its diversion airport, the aircraft itself began to issue explicit warnings, reinforcing the procedure the crew had abandoned.

4.1. Automated and Human Confirmation

• ECAM Alert (T0 + 1h 35m): The aircraft's monitoring system triggered a FUEL F. USED/FOB DISAGREE ECAM alert. This automated warning is a safety net designed for exactly this scenario, and its associated procedure directs the crew to the very same FUEL LEAK QRH procedure they had already stopped following.
• Visual Confirmation: A maintenance technician who happened to be on board visually confirmed a significant fuel leak streaming from the left engine.
• Imbalance Advisory (T0 + 2h 05m): As the imbalance exceeded 3,000 kg, the fuel quantity displays began flashing—another advisory that, once again, directs the crew back to the FUEL LEAK procedure.

Despite a direct automated alert, a flashing advisory, and a firsthand visual confirmation, the crew maintained their decision and kept both engines running.

With the aircraft losing fuel and its balance becoming increasingly precarious, the crew prepared for landing.

--------------------------------------------------------------------------------

5. Landing and Aftermath

The flight concluded with a safe landing, but the crew's procedural deviations continued on the ground, and investigators soon found the simple mechanical failure at the heart of the event.

5.1. On the Ground

The aircraft landed 2 hours and 20 minutes after takeoff. The final fuel state was critical:

• Total Fuel Missing: 5.2 tonnes
• Final Imbalance: 3.5 tonnes

The crew did correctly follow one crucial procedural step: they did not use thrust reversers at landing, which prevented leaking fuel from being blown onto the hot brakes and risking a fire.

However, they made one final deviation. To facilitate a 180° turnaround on the runway, they kept the leaking left engine running, further contaminating the runway with fuel before finally shutting it down. The total fuel lost during the event was 5.7 tonnes.

5.2. The Root Cause

A post-flight examination quickly revealed the mechanical failure. The primary fuel hose on the left engine had been installed incorrectly. Its mounting flange was misaligned, and engine vibrations during the flight caused the flange to move, creating a gap from which fuel poured out.

--------------------------------------------------------------------------------

6. Conclusion: Key Lessons from the A330 Fuel Leak

This incident serves as a powerful reminder that procedures are the bedrock of aviation safety. They are designed based on extensive engineering knowledge and lessons learned from past events. The following are the most critical takeaways from this case study:

1. Trust Your Procedures The QRH procedure exists to manage high-risk, high-stress situations safely and logically. The crew's decision to deviate from the critical engine-shutdown step dramatically increased the risk of fire and directly caused the dangerous aft CG condition and continued fuel loss. Procedures are a lifeline, not a suggestion.
2. Recognize How Systems Can Mask Problems This highlights a critical lesson in automation dependency: systems designed for one purpose (CG management) can inadvertently mask the symptoms of another critical failure (a fuel leak). Crews must maintain a healthy skepticism and investigate any persistent discrepancy, understanding that automated systems are not infallible and may not present a complete picture of the aircraft's state.
3. Act Decisively on Confirmatory Evidence The crew received multiple, independent confirmations of the leak: a rapidly growing imbalance, a specific ECAM alert, a visual confirmation from a technician, and a fuel imbalance advisory. In aviation, this is a critical juncture where crews must guard against plan continuation bias. The decision to divert was correct, but the failure to follow the associated safety procedure (engine shutdown) negated much of the risk reduction. Acting decisively on confirmatory evidence means executing the entire relevant procedure, not just parts of it.