The Pipe Everyone Knew About

▶️ Prefer to watch? Every story’s a short video → https://www.youtube.com/@GetSafetyIntel · 📣 Got a near-miss? Share it anonymously (QR + link at the bottom).

Fourteen years ago today a pipe let go in a California refinery and swallowed nineteen people in a cloud of vaporized oil. Every one of them ran and lived. Then the cloud found an ignition source, and the day stopped belonging to the refinery — it belonged to fifteen thousand neighbors who woke up the next morning short of breath. Here’s the part that should keep you up: the people closest to that pipe had been saying it needed to go for years.

It started as a drip.

Around 4:00 in the afternoon, operators in the #4 Crude Unit at the Chevron refinery in Richmond found a leak on an 8-inch line — the “4-sidecut,” a piece of carbon-steel pipe running gas oil at roughly 640°F. Hot enough that if it hit the air, it would light itself. The crew did what crews are trained to do: they went to find the source. That meant stripping the insulation off the line to see the metal underneath.

They got the lagging peeled back. And the pipe — thinned by 36 years of corrosion down to the width of a few sheets of paper in spots — opened up. A wave of flammable vapor rolled out and engulfed nineteen Chevron workers. Every one of them made it out of the cloud. About two minutes later, at 6:33 p.m., it ignited into a fireball and a black plume you could see across the Bay.

The U.S. Chemical Safety Board (CSB) spent two and a half years on it. The killer was sulfidation corrosion — sulfur in the crude quietly eating carbon steel from the inside. The 1976 pipe happened to be made of steel low in silicon, which made it corrode faster than the lines around it, and nobody had ever measured the wall thickness on that exact component. But here’s the thing that makes this a safety story and not just a metallurgy story: Chevron’s own inspectors had recommended upgrading that sidecut piping to corrosion-resistant metal. More than once. Over more than a decade. It kept getting deferred.

Name it and cite it: 29 CFR 1910.119 — Process Safety Management (PSM) — and specifically the mechanical integrity piece at 1910.119(j).

Translate it to the floor: Mechanical integrity is the boring, unglamorous promise that the equipment carrying the stuff that can kill you — pipes, pumps, vessels, relief valves — gets inspected on a schedule, and when an inspection says “this is thinning, replace it,” you replace it. Not next turnaround. Not when capital frees up. The rule exists because “we’ll get to it” is how a pipe you’ve walked past a thousand times becomes the pipe that puts your whole crew in a vapor cloud.

The relatable trigger: Richmond is why California went and wrote the toughest refinery safety rule in the country — Cal/OSHA §5189.1, effective in 2017 — and put a requirement in it called a damage mechanism review. In plain English: for every line in the unit, sit down and answer two questions before it fails — what is going to eat this pipe, and how will we know before it lets go? That requirement is written in the near-death of nineteen people who were just trying to find a leak.

The Full EHS Picture. This is why we’re Safety Intel and not just “Safety” — because the same failure hit all three at once. (E) The fire threw a plume of black smoke over Richmond, San Pablo, and North Richmond and triggered a shelter-in-place that ran about five hours; residents were dosed with particulate matter, the Bay Area Air Quality Management District worked the release, and it landed squarely in Clean Air Act territory. Chevron later paid the city of Richmond a $5 million settlement. (H) In the weeks that followed, roughly 15,000 people from the surrounding area sought medical treatment — irritated eyes, noses, and throats, wheezing, asthma attacks, trouble breathing. The people hurt worst that day mostly weren’t at the refinery; they were at home. (S) Nineteen workers stood inside an ignitable cloud and walked out — a near-miss that came within a couple of minutes of being a mass-casualty. One corroded pipe was an environmental release, a public-health event, and a near-fatal worker incident at the same time. That’s the rule, not the exception: the failure that kills a worker poisons the air and sickens the town in the same breath.

A pulp mill just got fined nearly $800K — and the CSB update reads like a checklist of what wasn’t there. On July 14, 2026, the CSB released its investigation update on the January 27 hydrogen-sulfide release at Woodland Pulp in Baileyville, Maine that killed two young engineers — a 20-year-old co-op student and a 26-year-old engineer. The findings: no fixed H2S detectors or alarms in the area, no personal H2S monitors on the two who died, and no system to track who was inside the building during the shutdown, which delayed the rescue. OSHA followed with citations totaling close to $800,000. So what for safety leaders: the company knew H2S could form in that acid sewer system — the hazard was recognized and the safeguards still weren’t there. Recognizing a hazard on paper and detecting it in the room are two different controls. If you’ve got a known toxic-gas mechanism anywhere in your process, the question this week is simple: fixed detection, personal monitors, and a way to account for every body inside during upset or shutdown — do you have all three, or do you have a JSA that mentions the gas?

Heat enforcement is live right now, rule or no rule. The federal heat standard is still stalled in rulemaking, but OSHA’s revised Heat National Emphasis Program took effect April 10, 2026 and it’s working this summer under the General Duty Clause. The tripwire inspectors are told to look for first is acclimatization — a new or returning worker thrown into high-intensity labor in the heat with no documented ramp-up. And if an inspector is already on your site for trenching or fall protection, they’re now instructed to code heat hazards while they’re there. So what for safety leaders: your new hires and your back-from-vacation crew are the ones the data says will go down first. A written acclimatization schedule — lighter first days, ramping up over a week — is both the thing that protects them and the thing that keeps a routine inspection from turning into a citation.

A millwright spots a pinhole weep on an insulated line carrying hot oil. The reflex — the one every one of us has been trained into — is to strip the lagging, get eyes on the metal, and find the source. He gets two wraps of insulation off before the board operator keys the radio: “Back out. We’re not doing this hot.” They isolate the line, depressure it, and then look. Nothing happened. And that’s exactly the point — nothing happened.

Read that against the top of this issue and you see it clean: the instinct to go investigate a live leak isn’t a character flaw, it’s the job. Error is normal; the fix is never “be more careful next time.” The fix is a crew and a system where the person who says stop gets backed up instantly, and where you never have to be a hero standing next to a corroded, pressurized, above-autoignition line to prove you take a leak seriously. The good catch here wasn’t bravery. It was two people agreeing that the pipe could wait ten minutes.

Got a fail or a near-miss? Hit reply, or scan the QR below — we’ll feature it anonymously — no names, no company, no blame. Just the lesson, so the next crew doesn’t learn it the hard way.

Pick the one line, vessel, or pump in your process that everybody “kind of knows” is getting tired — the one that shows up in hallway conversation but never on a work order. Today, put it on paper: what’s the damage mechanism eating it, when was it last actually inspected (not walked past — inspected), and what’s the trigger number that means it comes out of service. If you can’t answer those three, you’ve just found your Richmond pipe while it’s still a drip.

🎬 Rather watch than read? Every Safety Intel story is a short video on YouTube → https://www.youtube.com/@GetSafetyIntel — subscribe so you never miss one. 📸 Share YOUR near-miss (100% anonymous): https://scantoconfess.com — or just scan the QR above. 📤 Forward this to a crew member who needs it today.

Please stay Safe & Hydrated!!!