The 1989 Phillips 66 Pasadena Explosion: Process Safety Lessons for Hydrogen

By River Energy Solutions | 10/23/2026

On October 23, 1989, a vapor cloud explosion at the Phillips 66 Houston Chemical Complex in Pasadena, Texas, killed 23 workers and injured many more. It is one of the major accidents OSHA cites as background to its process safety management standard, the rules most of us in this industry work under today.

Thirty-seven years later, the causes are worth revisiting. None of them were exotic. They came down to isolation, procedures, maintenance and the design of the safety systems, and every one of them applies to the hydrogen facilities being built now.

What happened

The plant made high-density polyethylene in loop reactors. Each reactor had pipes called settling legs, where polymer collects, and the legs could plug. A specialist maintenance contractor had been brought in to clear plugged settling legs on one of the reactors.

Each settling leg was isolated from the reactor by a single ball valve operated by compressed air. The plant’s procedure was to close the valve, disconnect its air lines and lock it in the closed position. The air connections used to open and to close the valve were identical, and they had been reconnected in reverse. Investigators also found that the lock had been removed. With the hoses reversed, air meant to close the valve opened it.

More than 85,000 pounds of process gas, mostly ethylene, escaped through the open valve almost instantly. The vapor cloud spread through the plant and ignited within about 90 to 120 seconds, in an explosion estimated at 2.4 tons of TNT. A 20,000-gallon isobutane tank exploded 10 to 15 minutes later, more explosions followed, and the fire took about 10 hours to bring under control. OSHA counted 23 deaths and 132 injuries.

What investigators found

Isolation fell short of the company’s own standard. Phillips’ corporate policy required double block valves or a blind before maintenance. The site used an alternate procedure that relied on a single valve. Disconnecting the air and locking the valve, even when both are done, still leaves one valve between the maintenance crew and a pressurized reactor. Double lock is not double block.

The hazards of the work had not been analyzed. OSHA’s findings included the lack of a process hazard analysis, inadequate operating procedures, a block valve that was not fail-safe, an inadequate maintenance permit system and inadequate lockout and tagout procedures. The plant also had no fixed gas detection system.

The fire protection system shared a failure mode with the process. The firewater system was part of the process water system. The blast sheared off hydrants, and the pressure dropped. The regular fire pumps were disabled when the fire destroyed their power cables. Of three diesel backup pumps, one was out of service and another ran out of fuel in about an hour. Firefighters ended up drawing water from settling ponds, a cooling tower and the Houston Ship Channel.

OSHA cited Phillips for 566 willful and 9 serious violations and proposed a penalty of more than $5.6 million. The maintenance contractor was cited separately. Phillips settled for $4 million and agreed to put process safety management procedures in place at the complex and its sister facilities.

How Pasadena shaped process safety management

OSHA issued its Process Safety Management standard, 29 CFR 1910.119, on February 24, 1992. OSHA’s guide to the standard lists Pasadena, along with Bhopal and others, among the disasters that drew national attention to the potential for major catastrophes. The failures at Pasadena line up closely with the elements of that standard:

  • Process hazard analysis, paragraph (e)
  • Operating procedures, paragraph (f), including safe work practices for lockout and tagout and for opening process equipment or piping, under (f)(4)
  • Contractors, paragraph (h)
  • Mechanical integrity, paragraph (j)
  • Emergency planning and response, paragraph (n)

Anyone who has sat through a PSM audit has worked with these requirements. Pasadena is a reminder of why they exist.

Why the lessons matter for hydrogen

Hydrogen is harder to contain and easier to ignite than ethylene. Its minimum ignition energy in air is 0.017 mJ, about a quarter of ethylene’s 0.07 mJ, and it is flammable in air from 4 to 75 percent by volume. As the smallest molecule, it also leaks more readily than other gases. A hydrogen release during maintenance leaves even less margin for error. The lessons transfer directly.

Positive isolation is not optional. Before a hydrogen line, compressor or vessel is opened, it should be isolated with double block and bleed or a blind, and the isolation should be verified. A single closed valve, however well locked, is not positive isolation. Actuated valves need their energy source removed and their fail position understood, and air or hydraulic connections should be designed so they cannot be reversed.

Maintenance is a process hazard in its own right. It is easy for a hazard analysis to concentrate on normal operation and process upsets and give maintenance little attention. Clearing a plug, changing a filter or swapping a regulator puts people at an open process connection. Those tasks deserve the same attention in a HAZOP as an overpressure, and any change to how they are done belongs in Management of Change.

Safety systems must not share a failure mode with the process they protect. At Pasadena, the explosion took out the firewater supply because the two were part of the same system. In a hydrogen facility the same question applies to gas detection, enclosure ventilation, emergency shutdown valves and fire protection. If one event can disable both the process and the system meant to respond to it, the protection is not independent.

River Energy Solutions provides hydrogen engineering and safety consulting, including HAZOP and process hazard analysis, Management of Change and code reviews to NFPA 2. If you are planning a hydrogen project or reviewing the procedures for an existing one, contact us to talk with the engineer who will do the work.

Sources

Posted in Process Safety