Chevron Richmond Refinery Crude Unit Pipe Rupture and Fire

📋 Incident Summary

On August 6, 2012, a crude oil pipe in the crude unit at the Chevron refinery in Richmond, California, ruptured due to severe sulfidation corrosion, releasing a large cloud of flammable hydrocarbon vapor that ignited, creating a large fire. Nineteen workers were in the area at the time and had to escape the advancing fire cloud. More than 15,000 Richmond and neighboring community residents sought medical treatment in the days following the incident.

The CSB found that Chevron had known for more than ten years that the failed pipe component was susceptible to sulfidation corrosion and had repeatedly failed to apply inherently safer design principles or replace the component with silicon-killed steel, which resists sulfidation corrosion. The company also failed to adequately evaluate the risk when workers discovered the pipe was leaking shortly before the rupture.

The CSB issued 12 recommendations calling for stronger API standards for sulfidation corrosion inspection, improved leak response procedures, and — notably — for California and other states to adopt a safety case regulatory approach for refineries, modeled after the regime used in Norway, the UK, and Australia.

🔎 Key Findings

Finding 01

Ten-Year Known Corrosion Risk Was Not Corrected — Pipe Ruptured During Operations

Chevron had documented knowledge that the crude unit pipe component was susceptible to sulfidation corrosion for more than ten years before the August 2012 rupture. The company repeatedly evaluated but did not execute replacement with corrosion-resistant silicon-killed steel.

Finding 02

Workers Discovered a Leak — Correct Response Protocol Was Not Followed

Shortly before the catastrophic rupture, workers in the crude unit discovered that the pipe was actively leaking. Chevron did not have and did not apply adequate protocols for evaluating and responding to an active leak on a corroded pipe at risk of catastrophic failure, allowing the situation to escalate to a rupture.

Finding 03

15,000+ Community Members Sought Medical Treatment After the Fire

The large hydrocarbon fire and associated smoke plume caused more than 15,000 Richmond and neighboring community residents to seek medical evaluation and treatment in the days following the incident — a massive public health impact from a single refinery fire event.

Finding 04

Sulfidation Corrosion Inspection Standards Were Inadequate — Industry-Wide Gap

The CSB found that existing American Petroleum Institute (API) guidelines for sulfidation corrosion inspection were inadequate to ensure that facilities reliably identified high-risk piping components. The gap was an industry-wide problem, not unique to Chevron.

Finding 05

CSB Called for Safety Case Regulatory Regime for U.S. Refineries

The CSB recommended that California adopt a safety case regulatory approach for refineries — requiring each facility to develop and periodically update a safety case demonstrating that major hazard risks are reduced to as low as reasonably practicable — similar to regulatory frameworks in Norway, the UK, and Australia.

🔍 Root Causes

Sulfidation Corrosion Progressed Undetected Despite Known Risk — No Corrective Action Taken

Chevron knew the pipe component was at elevated risk for sulfidation corrosion but failed to replace it with corrosion-resistant material or implement inspection frequencies sufficient to detect the deterioration before rupture. The decision not to correct a known, documented risk was the primary cause of the failure.

Inadequate Leak Response Protocol Allowed Active Leak to Escalate to Catastrophic Rupture

When workers discovered the active leak before rupture, there was no adequate protocol to evaluate whether the leaking pipe should be immediately isolated and the unit shut down. Workers attempted to assess the situation rather than acting on a conservative protocol for leaks on known-corrosion-risk piping.

API Sulfidation Corrosion Guidance Was Insufficient to Drive Required Inspection Practices

Existing API standards for sulfidation corrosion inspection did not establish sufficiently rigorous requirements to ensure that refineries systematically identified and corrected high-risk piping. The absence of strong industry standards contributed to Chevron's failure to address the known risk.

☑ CSB Recommendations

→ Chevron U.S.A. Inc.

Develop and implement comprehensive written protocols for evaluating and responding to active hydrocarbon leaks in the crude unit — including clear criteria for isolating leaking components and initiating unit shutdown when a leak is identified on piping with known corrosion risk.

→ American Petroleum Institute (API)

Revise API RP 939-C (Guidelines for Avoiding Sulfidation Corrosion Failures in Oil Refineries) to establish minimum inspection requirements for susceptible piping, including mandatory use of silicon-killed steel inspection screening criteria and fitness-for-service evaluation requirements.

→ State of California / U.S. Refineries

Adopt a safety case regulatory regime for petroleum refineries, requiring each facility to develop, maintain, and periodically update a safety case demonstrating that major hazard risks are reduced to as low as reasonably practicable — consistent with established international petroleum refining safety regulatory frameworks.

→ Chevron U.S.A. Inc. / Industry

Implement a systematic program to identify all piping components in high-temperature crude service that are composed of carbon steel without adequate silicon content; prioritize inspection and replacement of identified at-risk components using silicon-killed or alloy steel alternatives.

💡 Lessons Learned

A documented known risk that is repeatedly evaluated but not corrected is not a managed risk — it is a deferred failure. Chevron's own records showed more than ten years of awareness that the failed pipe was susceptible to sulfidation corrosion. The decision not to replace it with corrosion-resistant material was made multiple times by multiple decision-makers. When known risks are deferred indefinitely, the interval between identification and incident becomes a countdown, not a monitoring program.

Leak response is a life-safety procedure. When workers discover an active leak on a high-risk pipe component, the correct response is not to investigate and monitor — it is to follow a conservative, pre-established protocol that treats the leak as a precursor to catastrophic failure until proven otherwise. Chevron did not have such a protocol. When workers discovered the leak, they did not have clear guidance on when isolation and shutdown were required.

Sulfidation corrosion is a known, predictable failure mechanism in high-temperature crude service — and the material solution (silicon-killed steel) has been understood for decades. When a facility chooses carbon steel without adequate silicon content for high-temperature crude service piping, it is accepting ongoing corrosion risk that inspection programs must continuously manage. The lower-cost engineering choice becomes the higher-cost outcome.

More than 15,000 community members seeking medical care is not a 'near miss' — it is a large-scale public health event triggered by a single pipe failure. Refineries embedded in residential communities must recognize that their worst-case fire scenario is also the community's worst-case air quality and public health event. Community consequence planning must be as rigorous as on-site emergency planning.

The CSB's recommendation for a safety case regulatory regime — adopted in the UK, Norway, and Australia — reflects a fundamental insight: prescriptive regulations that define minimum inspection frequencies are not sufficient for high-hazard facilities. A safety case requirement forces facilities to demonstrate that their risk controls are adequate for their specific hazards, rather than showing compliance with minimum standards. It is a performance standard, not a compliance checklist.

MI: Mechanical IntegrityPSI: Process Safety InformationSOP: Operating ProceduresPHA: Process Hazard AnalysisEP: Emergency Planning

🔨 Safety Meeting Toolbox Talk

►Does your facility have documented records of known corrosion or degradation risks that have been evaluated but not corrected? Is there a defined decision process and timeline for correcting known mechanical integrity risks?

►Does your facility have written leak response protocols that specify the conditions — including leak location, material, and component risk status — that require immediate isolation and unit shutdown versus monitoring and evaluation?

►Has your facility identified all piping in high-temperature crude, sulfur, or other corrosive service that is composed of carbon steel without corrosion-resistant alloying? Is that piping on an inspection schedule commensurate with its corrosion rate?

►How does your facility determine when a known corrosion risk crosses the threshold from 'manageable' to 'must be corrected before next turnaround'? Is that decision process documented and consistently applied?

Immediate Action Items

✓Audit your mechanical integrity records for all high-temperature or corrosive service piping and identify any components with documented corrosion risk that have not been corrected; establish a defined timeline for correction of each open item with management sign-off.

✓Review and update your active leak response protocols to ensure that clear escalation criteria exist — specifying the conditions that require immediate isolation, unit shutdown, or emergency response — particularly for leaks on piping with known inspection findings or elevated corrosion risk.

✓Screen your piping inspection records for high-temperature crude, naphtha, or sulfur-containing service to identify carbon steel piping that may be susceptible to sulfidation corrosion; schedule fitness-for-service evaluations and replacement with resistant materials for at-risk components.

✓Conduct a tabletop exercise of your leak response protocol with operations, maintenance, and EHS staff; identify gaps in decision-making clarity and revise the protocol to ensure conservative action is taken when workers discover active leaks on at-risk piping.

🔗 PSM Failures Behind This Incident

This incident traced to breakdowns across 5 PSM elements (MI · PSI · SOP · PHA · EP). Each represents a documented gap that process safety documentation and consulting can close before a similar event occurs at your facility.

Mechanical Integrity (MI)

Equipment must be designed, inspected, and maintained to operate safely in its intended service. Mechanical integrity failures — degraded equipment, missed inspections, deferred repairs — contributed to loss of containment here.

Supporting documents in our library →

Process Safety Information (PSI)

Accurate, complete Process Safety Information is the foundation every other PSM element depends on. When PSI is missing or wrong — chemistry data, equipment specs, P&IDs — the entire hazard analysis is built on a flawed base.

Supporting documents in our library →

Operating Procedures (SOPs)

Operators cannot reliably hold safe operating limits without clear, current, enforced procedures. Deviation from acceptable operating conditions — a root cause here — is a direct consequence of SOP failure.

Supporting documents in our library →

Process Hazard Analysis (PHA)

A structured PHA or HAZOP study exists to identify exactly these scenarios before they occur. When PHA is absent, superficial, or overdue for revalidation, hazards operate unseen until they kill someone.

Supporting documents in our library →

Employee Participation

OSHA PSM requires workers to be meaningfully involved in hazard analyses and procedure development — not just trained on the finished product. Active participation catches gaps that management alone misses.

Supporting documents in our library →

SafeGuard PSM

Process Safety Management Consulting & Document Library

📂

PSM Document Library

32 ready-to-deploy PSM documents covering all 14 OSHA elements — procedures, checklists, and audit templates built for facilities operating under 29 CFR 1910.119.

Browse the Library →

📊

Free PSM Health Score

Find out where your PSM program stands across all 14 OSHA elements. Our free health score surfaces your biggest gaps in under 10 minutes — no account required.

Check Your Score →

📞

Consulting Services

PHA facilitation, PSM program builds, compliance audits, and OSHA inspection support. Transparent flat-fee pricing — no retainer required to get started.

View Pricing →

📋 Explore the full incident library: All 132 CSB Case Studies →