Copper Sugar Mill water tank collapse and industrial safety lessons

 Copper Sugar Mill water tank collapse and industrial safety lessons

 

HSE-RM SOLUTIONS | Technical learning review | 8 November 2026

 

A water tank may receive less attention than a boiler, reactor or fuel-storage system. Yet its contents, elevation, temperature and supporting structure can create a serious risk to people working nearby.

 

The collapse reported at Copper Sugar Mill in Dadariya village, Valod taluka, Tapi district, raises an essential question for industrial management:

How do we demonstrate that everyday utility equipment remains safe throughout its working life?

 

This review brings together the available reporting, distinguishes official comments from investigation findings, and sets out questions for engineers, investigators and safety teams. Its purpose is to support learning and better decisions while the cause of this incident remains unresolved.

 

What has been reported

On the evening of 5 November 2026, hot- and cold-water tanks reportedly collapsed at the mill, killing two employees, identified in news coverage as Arun Patel and Dharmesh Patel. Police and fire teams from Vyara and Bardoli attended the scene. The Times of India published its account on 6 November, drawing on agency reporting.

 

Three distinctions matter when interpreting the emerging information.

 

The incident time is not yet a settled timeline. Gujarati Jagran places the collapse at approximately 5:30 pm. The Times of India gives approximately 6:45 pm, while the fire officer quoted in that report identifies 6:45 pm as the time information was received. Call records and CCTV are needed to reconcile those accounts; the difference alone does not establish a response delay.

 

Personal details and rescue timings differ between reports. Published ages vary, and accounts give different recovery times. Those differences do not change the reported loss of two lives, but they should be resolved from official records before being used in a detailed chronology.

 

Reported tank capacity is not the same as the inventory at failure. A PTI-credited report published by The Guardian Chronicle describes two overhead tanks of 50,000 litres each. Their actual fill levels, temperatures and structural arrangement have not been established in the material reviewed.

 

Official comments and investigation status

There are attributable official comments in news coverage, but these are different from a published technical investigation report.

 

Information available

Attribution and significance

Fire-service response and recovery of two bodies

Vyara Fire Department official Dilip Odedara is quoted through ANI in The Times of India. His account concerns the response, not a technical cause.

Accidental-death case and forensic examination

The PTI-credited report attributes these developments, and an investigation into structural stability, to Vyara division Deputy Superintendent of Police P G Narwade. The underlying police record was not available in the reviewed material.

Visits and investigation involving the district administration, police and DISH

Reported by Sandesh. This is a media account of official activity, not a released Directorate of Industrial Safety and Health finding.

Recent tank repairs

GSTV attributes this claim to local people; Gujarat First also reports discussion of recent repairs. It is a lead to verify through records and examination.

 

As of this review till 8 November 2026, no publicly accessible final forensic report, signed structural-failure report, DISH investigation report or mill-issued technical explanation was located in the searches conducted.

 

This does not establish that such documents do not exist or that authorities have taken no action.

 

The available reporting does not establish which component failed first, whether one tank brought down the other, or whether the reported repairs contributed. It also does not establish a boiler explosion, fire or pressure-vessel rupture.

The documents that would materially improve understanding are the police incident record, inspection or inquiry orders, tank drawings, repair and inspection records, forensic examination findings, and any official restrictions or conditions for restarting the affected area.

 

Why water storage deserves serious hazard identification

Water does not need to burn to cause a fatal industrial accident. A failed tank can expose people to falling equipment, debris, a sudden liquid surge, entrapment and, where temperatures are high, scalding.

 

Consider the reported capacity only as an illustration. Using an approximate water density of one kilogram per litre, 50,000 litres would represent about 50 tonnes of water if a tank were full. The tank and its supporting structure add further weight. Actual density varies with temperature, and actual inventory must be established separately.

 

That calculation does not prove overloading. A properly designed and maintained installation should accommodate its specified loads. The engineering question is whether the load present at the time exceeded the remaining capacity of the entire installation.

 

A normal operating load can become unsafe if a support, connection, tank wall or foundation has deteriorated. Equally, an apparently sound structure may be exposed to conditions outside its design basis.

 

An important distinction follows: an atmospheric tank experiences pressure from the water depth even though it is not a pressure vessel. Calling the contents “hot water” does not establish that steam pressure was involved.

 

HSE's bulk-storage guidance identifies corrosion, structural failure, overfilling, maintenance faults and other mechanisms as relevant assessment categories. The applicable mechanisms must be selected for the actual equipment and service.

 

Hazard identification through four connected views

Physical equipment and structures

Trace the load from the water through the tank, its connections, supports and foundations. Identify the tank material and construction, the arrangement of both tanks, and any shared platform, columns or bracing.

 

For steel components, examine deterioration and connection condition. For concrete components, examine cracking, spalling, reinforcement condition and settlement. Select the assessment method to match the actual construction.

 

The useful question is: Which component could lose its ability to contain or carry the load, and who would be exposed?

 

Process and operating conditions

Establish the purpose of each tank, normal and maximum levels, water temperature, filling and draining routes, pump operation and connections to other systems.

 

Consider start-up, shutdown, maintenance and restart as well as routine operation. If a tank is enclosed, its venting and any credible pressure or vacuum conditions require examination.

 

The useful question is: Which operating change could apply an unexpected load or reveal an existing weakness?

Activities around the equipment

 

Map inspection, cleaning, repair, valve operation, access routes and work on nearby piping. Identify activities that require people to stand beneath or beside tanks and supports.

 

Work that appears routine may place someone within the consequences of a failure elsewhere in the system. Access planning therefore needs to consider both the task and the surrounding equipment.

 

The useful question is: Can the work be performed without exposing people to an unverified structure or an uncontrolled release?

 

People and management arrangements

Identify who owns the asset, assesses defects, approves repairs, controls operating limits and authorizes return to service. Check how operators communicate leaks, movement, unusual noise and other changes.

 

The useful question is: When someone reports a concern, what happens next, and who verifies that the concern has been resolved?

 

Possible failure mechanisms and the evidence needed

These are investigation hypotheses, not findings about Copper Sugar Mill. Their relevance depends on the construction, operating history and physical evidence.

 

 

Scenario to examine

Evidence that would help distinguish it

Tank wall, bottom or connection failure

Fracture origin, material condition, thickness measurements where appropriate, welds or bolted seams, and earlier inspection records.

Support or bracing failure

Original and modified drawings, member condition, connections, load calculations, and the sequence of deformation.

Foundation movement or loss of support

Level surveys, soil and drainage conditions, settlement records, adjacent excavation and evidence of erosion.

Repair or modification affecting strength

Repair scope, engineering approval, materials, workmanship records, inspection results and return-to-service authorization.

Unexpected level or loading condition

Level history, pump and valve records, overflow arrangements, changes in capacity, and added pipe or equipment loads.

Thermal movement or piping loads

Actual temperatures, temperature cycles, pipe supports and restraints, and the loads transferred at tank connections.

Pressure, vacuum or hydraulic transient

First establish a credible closed or connected system; then examine vents, drainage, pump trips and valve events. Do not assume these mechanisms apply to an open tank.

One failure escalating into another

Whether tanks share supports, impact marks, falling direction, CCTV and the timing of connected-pipe failure.

 

The investigation must distinguish damage that initiated the event from damage caused by the collapse. A broken pipe found in the debris may have triggered the event, or it may have broken after a tank or support failed. Its final condition alone cannot settle the sequence.

 

Likewise, ordinary hydrostatic loading, pump-induced pipe forces and gas-space pressure are different mechanisms. They require different evidence and controls.

 

What the reported repairs should lead investigators to ask

The repair claim deserves examination without becoming a premature conclusion.

First establish whether repairs occurred, when they occurred and what they covered. A coating repair, a leak patch, a structural modification and replacement of a support are very different interventions.

Then ask:

  • What defect or operating problem prompted the work?
  • Was the damaged area the full extent of deterioration, or only its visible symptom?
  • Who defined and approved the repair method?
  • Were the tank, supports and connected piping assessed together?
  • What inspection or testing was specified, and what did the results show?
  • Did the work change the load path, restraint, capacity or operating limits?
  • Who accepted the installation for service, and on what evidence?
  • Were concerns or restrictions left open when operation resumed?

 

A repair invoice demonstrates that work was purchased. It does not, by itself, demonstrate adequate remaining strength.

Where engineering tests are necessary, competent specialists must define the method, conditions and acceptance criteria. Do not fill, pressurize or approach a damaged installation simply to see whether it holds.

 

Lessons from completed investigations elsewhere

 

Tetra Technologies tank collapse in Scotland

A UK HSE account published on 14 May 2026 describes a storage-tank collapse at Peterhead on 21 June 2023. A worker suffered life-changing injuries when a bolted steel tank containing calcium chloride solution failed.

 

Investigators identified severe corrosion: a plate originally 5.5 mm thick had approximately 1 mm remaining at the failure area. Earlier corrosion findings had not resulted in adequate corrective action, and evidence of a regular inspection regime was lacking.

 

This involved a different liquid and installation. The transferable lesson is that a recorded defect must lead to an engineering decision and completed action. Inspection records have little protective value if deterioration continues unaddressed.

 

Loy-Lange pressure-vessel failure in the United States

The US Chemical Safety Board's investigation of the 3 April 2017 Loy-Lange incident identified corrosion, inadequate repair, inspection deficiencies and weaknesses in safety management. Four people died. Its final report is publicly available.

 

This was a pressure-vessel event and must not be used to label the Tapi collapse as a pressure explosion. It demonstrates why investigators examine the history of warnings, repairs and operating decisions alongside the failed component.

These cases provide questions to test. They do not establish that the same defects existed at Copper Sugar Mill.

 

Questions for authorities and the investigation team

A useful investigation explains the physical failure, the exposure of people and the decisions that allowed the hazardous condition to persist.

 

1. What failed first? Locate the initiation point and reconstruct the sequence. Determine whether the two tanks failed independently, shared a failing support, or were involved in a cascade.

 

2. What was the installation designed to withstand? Obtain the original design, later modifications and permissible operating conditions. Establish whether the current arrangement matched the approved configuration.

 

3. What condition was it actually in? Compare measured deterioration and defects with the capacity required for the service. Age alone does not prove unfitness, and a recent coat of paint does not prove integrity.

 

4. What was happening immediately before failure? Reconstruct filling, draining, heating, pump and valve activity, maintenance and nearby work. Use records and independent witness accounts to test explanations.

 

5. What had changed? Examine repairs, new piping, altered supports, operating changes and restart conditions. Determine whether changes were technically assessed and communicated.

 

6. Why were people exposed? Establish the employees' tasks and locations, available access routes and any work restrictions. This is a question about work design and controls, not an assumption of worker fault.

 

7. Were there earlier warnings? Look for leaks, movement, corrosion, cracking, repeated repairs, unusual sounds and unresolved observations. Trace each relevant concern through reporting, assessment and closure.

 

8. What prevented detection or correction? Examine inspection coverage, competence, acceptance criteria, responsibilities, maintenance priorities and supervision.

 

9. Could another installation fail in the same way? Identify similar tanks, common construction details, repair practices and inspection gaps across the site or organization.

 

10. What evidence will demonstrate that corrective action works? Require measurable completion criteria and verification by appropriate competent persons.

 

Evidence to preserve and examine

Rescue and prevention of further harm take priority. Once the scene is controlled, investigators should preserve evidence before unnecessary dismantling, repair or disposal.

 

A coordinated evidence plan should include:

  • The physical scene: authenticated photographs, measured positions, support and foundation condition, fracture surfaces, and records of components moved during rescue.
  • The operating timeline: CCTV, control-room logs, available level and temperature data, pump and valve events, alarms, shift handovers and emergency-call records.
  • The asset history: drawings, specifications, inspection findings, repairs, contractor documents, modifications and approvals.
  • People's observations: separate accounts from operators, maintenance personnel, supervisors, contractors and responders.
  • The management record: unresolved defects, risk assessments, restrictions, decisions to continue operation and return-to-service acceptance.

 

Specialists should select appropriate material examination and structural assessment methods. Keep sample identity and custody records so laboratory results can be connected reliably to the original component.

 

If evidence is missing, record the limitation. An investigation should explain which hypotheses the evidence supports, contradicts or cannot resolve.

 

 

 

 

Practical controls for other mills and industrial facilities

 

Before the next shift

Identify tanks whose failure could strike, flood, scald or trap people. Confirm that responsible personnel know their limits, current condition and any restrictions.

 

From a safe position, check for changes such as leakage, visible distortion, displaced supports, cracking, severe corrosion or unexpected movement. An abnormality requires prompt escalation and competent assessment. Where instability is suspected, keep people clear and arrange a safe shutdown or isolation under an assessed plan.

 

Do not send an operator beneath a suspect tank to obtain a better photograph or operate a local valve.

 

Before repair or restart

Ensure that the work scope addresses the underlying defect and that competent engineers have considered the whole load-bearing and containment system.

 

Return-to-service decisions should consider completed inspections, outstanding defects, operating limits, suitable controls, commissioning arrangements and authorization. The plan must account for how filling, draining or heating changes the loads.

 

Where applicable, verify level indication, alarms, overflow routes, venting and isolation arrangements. The equipment design determines which safeguards are needed; a universal checklist cannot establish suitability.

 

During continued operation

Maintain an asset register linking each tank to its design basis, inspection history, restrictions and accountable owner. Set inspection scope and intervals from the equipment, deterioration mechanisms, service conditions and applicable requirements.

 

Photographs can help track visible change. They cannot replace assessment of hidden deterioration, structural capacity or repair quality.

 

Review work locations and access arrangements to reduce exposure if containment or support fails. Consider whether valves, instruments or routine tasks can be relocated to safer positions.

 

A helmet, an extinguisher or a signed checklist cannot compensate for an unstable structure. Prevention requires equipment integrity and control of exposure.

 

How HSE-RM SOLUTIONS can support this work

HSE-RM SOLUTIONS can help facilities connect hazard identification with operating decisions through:

  • Utility and storage-system hazard identification and risk assessment.
  • Process, equipment, activity and human-factor reviews.
  • Asset-integrity programme reviews, with specialist structural and materials assessment where required.
  • Repair, modification and restart-readiness reviews.
  • Incident-investigation support and corrective-action verification.
  • Practical training for operators, maintenance personnel, supervisors and safety teams.

 

The aim is to help organizations recognize which equipment is safety-critical, what information is needed, who must act and how safe operation will be demonstrated.

 

You do not need to know every technical answer to begin asking useful questions. You do need to understand the equipment's purpose, its operating conditions, the people exposed and the evidence required for a sound decision.

 

For every tank at your facility, can you show why it is safe to operate today?

 

HSE-RM SOLUTIONS
Your Partner In Safety...

 

Process Safety Review - SynZeal hydrogenation Case Study

 HSE-RM SOLUTIONS | Process Safety Review | 7 November 2026

 

A hydrogenation reactor is reported to have exploded. That describes the incident. It does not yet explain the failure.

Did a chemical reaction generate heat faster than the plant could remove it? Did hydrogen leak and ignite outside the reactor? Did air enter equipment that still contained hydrogen? Did pressure exceed the equipment’s capacity for another reason?

 

These questions lead to different investigations—and different corrective actions.

 

The SynZeal Pharmachem incident at Saykha GIDC in Bharuch, Gujarat, deserves an evidence-led examination of the entire operation: the chemistry, reactor, hydrogen supply, utilities, connected equipment, work activities and decisions that kept the process running.

 

Identifying the problem means reconstructing how a safe operating condition was lost, and why the available safeguards did not prevent severe consequences.

 

What is established about the SynZeal incident?

Reports published on 17–18 October 2026 describe an explosion late on 16 October at SynZeal Pharmachem in Saykha GIDC, Vagra taluka, Bharuch district. Although the wider discussion has referred to Dahej, the incident location reported by these sources is Saykha.

 

The Indian Express reported five fatalities and five injured workers, immediate suspension of operations and an investigation by the Directorate of Industrial Safety and Health (DISH). It quoted the district collector as saying the exact cause was not yet known. Akashvani’s report associated the event with hydrogenation.

 

Sources Research Input:

https://indianexpress.com/article/cities/ahmedabad/bharuch-chemical-plant-blast-synzeal-pharmachem-workers-killed-10925704/  

https://newsonair.gov.in/gujarat-five-workers-killed-five-injured-in-reactor-explosion-at-chemical-factory/

https://www.bhaskarenglish.in/amp/local/gujarat/news/bharuch-saykha-gidc-synzeal-pharmachem-factory-explosion-fire-139391807.html

https://news.chemnet.com/news-10919.html

 

Some details conflict. The Times of India reported a 5-kilolitre reactor and five injured people; an IANS report carried by NDTV described a 15-kilolitre reactor and six injured people. These differences should be resolved using official records before undertaking calculations or presenting a definitive reconstruction.

 

Sources Research Input:

https://timesofindia.indiatimes.com/city/surat/five-killed-in-blast-at-bharuch-pharma-unit/articleshow/135019650.cms

https://www.ndtv.com/india-news/reactor-blast-synzeal-pharmachem-gujarat-bharuch-kills-5-gas-leak-dust-haze-gidc-12198128;

https://www.business-humanrights.org/en/latest-news/india-five-workers-killed-in-reactor-explosion-at-synzeal-pharmachem-plant-in-gujarat-authorities-investigate-safety-measures/

 

Is an official investigation report available?

 

As of this review on 7 November 2026, we have not located a publicly accessible final technical investigation report establishing the cause of the SynZeal explosion.

 

The Times of India reported separate DISH and Gujarat Pollution Control Board investigations and a police accidental-death case. These are reports of official action, not the investigators’ completed findings. The original signed closure order, forensic findings and final causal analysis were not available in the material reviewed.

 

Accordingly, this article separates reported facts from engineering hypotheses. It does not identify a confirmed cause, assign blame or suggest that every hazard discussed was present at SynZeal.

 

Official historical incident records and a full investigation report from another accident are linked below. They provide useful comparisons; they are not reports on SynZeal.

 

First distinguish the mechanisms

The word “explosion” can conceal several different events. An investigator should establish the sequence before selecting an explanation.

 

Mechanism to examine

What could happen

Evidence that would help distinguish it

Reaction-driven overpressure

Uncontrolled heat release causes boiling, gas generation or decomposition, exceeding containment capacity.

Batch chemistry, temperature and pressure trends, reaction testing, cooling performance and relief calculations.

Pressure failure without initial combustion

Excessive hydrogen supply pressure, a blocked path or another pressure source overloads equipment.

Supply and vessel pressures, regulator condition, valve alignment, equipment ratings and fracture examination.

Combustion inside equipment

Hydrogen or another combustible material mixes with sufficient air and encounters an ignition source.

Purging records, oxygen measurements, equipment-opening history and specialist damage analysis.

Release and ignition outside equipment

A leak forms an ignitable atmosphere around the reactor or connected equipment.

Leak locations, gas detection, CCTV, ventilation, ignition-source evidence and the earliest damage.

 

These pathways can interact. A pressure rupture may release material that subsequently burns. An external fire may heat and damage a vessel. The equipment with the greatest visible damage is therefore not automatically the initiating location.

 

The following assessment is a framework for testing these alternatives, informed by (https://www.hse.gov.uk/pubns/indg254.pdf) and (https://www.energy.gov/cmei/fuels/safe-use-hydrogen)

 

Where could control have been lost?

1. Heat generation exceeded the available cooling

Many hydrogenation reactions release heat. Safe operation depends on understanding the heat produced under the actual conditions and the plant’s ability to remove it.

 

A cooling pump running is not proof of adequate cooling. Investigators should examine coolant flow, inlet temperature, fouling, control-valve response and competition from other equipment using the same utility. They should also establish whether the batch size, feed conditions or catalyst activity changed the heat load.

 

The central question is: how much time remained between the first abnormal condition and a dangerous temperature or pressure?

 

Recommended assessments include reaction calorimetry, credible cooling-failure scenarios and an emergency strategy demonstrated to work within that time. A laboratory recipe or a history of successful batches does not establish the full operating envelope.

 

2. Agitation, hydrogen uptake or reaction progress changed

Hydrogen must reach the reacting material. Mixing and gas–liquid contact can therefore influence reaction rate, heat release and completion.

 

Loss of agitation does not universally mean that the reaction immediately accelerates. It may reduce hydrogen uptake. Depending on the chemistry and feed arrangement, however, an interruption can leave an incompletely reacted mixture or accumulated reactant that behaves differently when mixing or feeding resumes.

 

Investigators should compare actual agitator performance, hydrogen flow, temperature response, sampling results and restart decisions. An electrical “motor running” indication alone cannot establish that the contents were mixing as intended.

 

Safe hold and restart conditions need a documented technical basis. Where an incomplete mixture may be unstable, its behaviour must be tested. Abnormal operation deserves the same scrutiny as the normal recipe.

 

 

3. The actual charge differed from the assessed chemistry

The investigation should establish what entered the vessel—not simply what the batch sheet required.

 

Possible differences include the wrong material, incorrect quantity, a different catalyst grade or activity, recovered-solvent composition, cleaning residues, water contamination or an unexpected impurity. Whether any of these is hazardous depends on the actual reaction.

 

Collect retained raw-material samples, supplier and lot information, charging records, weighing data, transfer-line arrangements and cleaning history. Compare the incident batch with relevant earlier batches.

 

Where reporting names methylene dichloride, or MDC, that does not establish that it was the first material to ignite or the cause of the explosion. Its role requires the actual formulation and conditions. A detected substance in post-incident debris may also reflect release, decomposition or contamination.

 

Material-quality acceptance and process-safety acceptance answer different questions. Investigators should test credible deviations using suitable screening and, where required, calorimetry that measures heat and gas generation.

 

4. Hydrogen pressure reached equipment that could not safely contain it

A supply system can contain hydrogen at a higher pressure than downstream equipment is designed to withstand. The investigation must examine how that difference was controlled.

 

Potential scenarios to assess include regulator malfunction, unintended valve alignment, pressure communication through connected lines, backflow and blocked discharge paths. These are hypotheses, not descriptions of the SynZeal installation.

 

Compare the design ratings and operating limits of the entire pressure boundary: reactor, filters, hoses, instruments, valves and connected vessels. Identify the weakest relevant component and verify how it was protected.

 

Regulation, isolation, pressure protection and testing must be selected for the actual system. A pressure test demonstrates particular integrity conditions; it does not validate the reaction or every credible overpressure scenario.

 

5. Air and hydrogen were allowed to coexist

Hydrogen inside a system is not, by itself, proof that an explosive mixture existed. An oxidizer and appropriate conditions are also required.

 

Air may be introduced during opening, maintenance, sampling, a loss of containment or an inadequately controlled transition between operating states. The investigation should reconstruct the actual sequence, including any interruption and restart.

 

Ask how oxygen was excluded before hydrogen admission, and how residual hydrogen was addressed before equipment was opened. Was the purge arrangement validated for the vessel and connected spaces? Was its endpoint demonstrated by suitable measurements where required, or assumed from elapsed time?

 

Inerting procedures need suitable instrumentation, verified gas supply and a defined response to failure. Nitrogen introduces an asphyxiation hazard of its own, which must also be controlled.

 

6. Hydrogen or solvent escaped and encountered an ignition source

Leaks may originate at agitator seals, flanges, valve stems, instrument connections, hoses or associated equipment. The initiating leak may occur away from the eventual centre of damage.

 

For each credible release, ask where the material could travel or accumulate. Ventilation, congestion, enclosures and roof spaces matter. Gas detection should reflect the release scenarios and have a defined, tested response; a detector’s presence alone does not demonstrate effective protection.

 

Potential ignition sources include electrical arcs, static discharge, hot surfaces, mechanical friction, unsuitable portable equipment and maintenance activities. Each requires a credible connection to the released material.

 

Calling equipment “flameproof” is insufficient. Its certification and installation must suit the hazardous-area classification, gas and temperature requirements. Bonding and earthing address particular electrical hazards; they cannot compensate for inadequate containment or control every ignition mechanism.

 

7. Catalyst handling created a hazard outside normal production

Some hydrogenation catalysts can become hazardous when exposed to air, particularly after use or when allowed to dry. The risk depends on the catalyst, its condition and the material associated with it.

 

The investigation must therefore establish whether anyone was charging catalyst, taking samples, filtering product, cleaning equipment, handling spent material or performing catalyst reactivation. The reaction may have ended while a hazardous condition remained elsewhere in the system.

 

Identify the catalyst and obtain its supplier guidance, use history and handling records. Examine deposits and waste as well as the reactor.

 

Controls should cover transfer, filtration, temporary storage and disposal. There is no universal instruction to add water or another liquid: any treatment must be compatible with the actual material and approved procedure.

 

8. Containment or protective systems were unsuitable, impaired or too slow

Mechanical integrity requires examination of materials, fabrication, seals, corrosion, inspection history and operating loads. Damage found after an explosion must be assessed to distinguish a pre-existing defect from damage caused by the event.

 

Pressure relief requires a separate assessment. Investigators should identify the scenario used for sizing, whether gas or two-phase discharge was considered, and whether the discharge route remained effective. Isolation, blockage and backpressure can matter.

 

A relief device designed for one overpressure scenario cannot automatically be credited against rapid internal combustion. The design basis must match the event being considered.

 

Finally, test the complete protective function: sensor, logic, final element, response time and utilities. Two safeguards may share a common failure if they depend on the same sensor, power supply or cooling source. An alarm is useful only if a competent person has enough time and a workable action to respond.

 

What comparable incidents teach us

Historical cases widen the investigation. They do not establish which mechanism occurred at SynZeal.

 

Pharmaceutical hydrogenation, 30 April 1987

An official Hydrogen Incidents and Accidents Database record describes explosions and fire around a reactor used to hydrogenate a pharmaceutical intermediate. The operation had been left with hydrogen above the liquid after the agitator was stopped.

 

The record identifies a suspected agitator-related hydrogen leak and recurring maintenance problems. It also acknowledges gaps in the available explanation of the release mechanism.

 

The lesson is to examine equipment reliability and the safety of interrupted or overnight operation, even when the control panel appeared normal.

Read: https://knowledge.clean-hydrogen.europa.eu/hiad/incidents/explosions-reactor-used-hydrogenate-pharmaceutical-intermediates

 

Hydrogenation-unit cleaning, France, 14 December 2018

A second official record describes an explosion when buffer tanks were opened for cleaning after catalyst reactivation. Two people were injured.

 

The probable mechanism involved residual hydrogen, omitted nitrogen purging, air entering during opening and ignition associated with a catalyst deposit. The record states that why the purge procedure was not followed remained unknown.

The lesson extends beyond requiring a procedure: investigate how safe equipment-opening conditions are verified, and why a necessary step could be missed.

 

Read: https://knowledge.clean-hydrogen.europa.eu/hiad/incidents/explosion-hydrogenation-reactor

 

 

T2 Laboratories, United States, 19 December 2007

This was a different chemical process, not pharmaceutical hydrogenation. It remains a valuable example of an evidence-based runaway-reaction investigation.

 

The US Chemical Safety Board examined competing explanations and identified insufficient cooling as the most credible initiating scenario. Its investigation also addressed unrecognized reaction hazards and inadequate protective provisions. Four people died and 32 were injured.

 

The lesson is methodological: test plausible explanations against physical evidence and chemistry, then evaluate whether the safeguards could have controlled the event.

Read: https://www.csb.gov/assets/1/20/t2_final_copy_9_17_09.pdf

 

 

What investigators should preserve and establish

Evidence can disappear during cleanup, repairs, software changes and routine record overwriting. Once rescue and immediate stabilization permit safe access, a competent investigation team should preserve relevant material under documented custody.

 

The following questions connect evidence to explanations rather than beginning with a preferred cause.

Evidence

Question it can help answer

Important limitation

Temperature, pressure, hydrogen-flow and utility trends

Which variable changed first, and how quickly?

Recording intervals, sensor range, clock differences and damaged instruments can hide the sequence.

Batch records and retained samples

Was the actual composition and quantity consistent with the assessed process?

Post-event residues alone may not represent the original charge.

Agitator, seal and maintenance records

Was mixing or containment impaired before the incident?

A broken component may be a consequence rather than the initiating failure.

Valve positions, regulator tests and supply records

Could pressure have reached an unintended part of the system?

Positions may change during emergency response; document those interventions.

Purging, opening and work-permit records

Could hydrogen and air have coexisted during a transition or activity?

A signed checklist does not prove that the intended physical condition existed.

Alarm, trip, bypass and proof-test records

Which safeguards were available and what did they actually do?

Installation and certification do not establish performance at the incident time.

CCTV, witness accounts and forensic examination

Where did the first release, fire or pressure event occur?

Synchronize timelines and distinguish direct observations from later interpretation.

Reaction testing and relief-design calculations

Could a proposed mechanism explain the observed escalation?

Tests must represent the relevant materials, conditions and credible deviations.

 

A strong conclusion should state which evidence supports a mechanism, which evidence challenges it, and what uncertainty remains. A mechanism should not be ruled out solely because the plant completed earlier batches successfully.

 

Look beyond the failed component

Finding a defective seal, missed purge or abnormal batch is only part of the investigation.

 

Why was that condition possible? Why was it not detected? Why did it lead to fatalities?

 

Using HSE-RM SOLUTIONS’ Process–Equipment–Activity–Human approach, investigators can connect the technical sequence with the decisions behind it:

  • Process: Were reaction hazards, incomplete mixtures, operating limits and emergency conditions understood?
  • Equipment: Were containment, utilities and protective functions suitable for the actual duty?
  • Activity: Did the assessment include sampling, cleaning, interruption, maintenance and restart?
  • Human and organizational factors: Were instructions usable, responsibilities clear, supervision adequate and concerns acted upon?

 

For facilities introducing new products or changing production scale, examine the authorization of changes to chemistry, solvent, catalyst, batch size, feed arrangements and equipment. Determine whether the revised process was assessed before use.

 

If a procedure was not followed, investigate why. Availability, clarity, workload, equipment condition, training and conflicting demands may all require examination. “Human error” is a starting point for questions, not a complete causal explanation.

Ref.: https://www.hse.gov.uk/pubns/hsg245.pdf

 

What should a safe working day look like?

Each shift needs demonstrable readiness for the specific operation. No checklist guarantees safety.

 

Before a batch starts, verify:

  1. Authorized process: Materials, quantities, catalyst, equipment and limits match the assessed operation.
  2. Plant readiness: Containment, line-up, mixing, cooling and required utilities have been checked.
  3. Controlled atmosphere and pressure: Hydrogen admission, inerting and isolation follow validated arrangements.
  4. Available safeguards: Alarms, trips, detection and relief paths are ready; impairments have been formally addressed.
  5. Competent response: Operators know when to stop, whom to contact and which actions are authorized.
  6. Safe interruption: Hold, shutdown and restart conditions are defined.
  7. Effective handover: The next shift receives details of incomplete reactions, abnormalities, maintenance and bypasses.
  8. Emergency readiness: Personnel can withdraw, account for others and brief responders.

 

Build these checks into site-specific procedures. An unexplained trend or unavailable critical safeguard needs assessment and action.

 

Following an incident, restarting should require competent assessment of damage and unresolved mechanisms, completed corrective actions, verified safeguards and satisfaction of applicable authority requirements. Training or replacement equipment alone cannot demonstrate that the original failure pathway has been controlled.

 

HSE-RM SOLUTIONS: Turning findings into prevention

The value of an investigation is demonstrated by what changes afterward.

 

HSE-RM SOLUTIONS supports pharmaceutical and chemical facilities through:

  • Process hazard identification and focused HAZOP studies.
  • Review of reaction-hazard information and the need for specialist testing.
  • Hydrogen-system, ignition-source and hazardous-area assessments.
  • Review of equipment integrity, safeguards and emergency arrangements.
  • Investigation support, corrective-action planning and effectiveness checks.
  • Practical procedures, change-management systems and workforce training.

 

Recommendations should identify the problem being controlled, the responsible person, the evidence required for completion and how effectiveness will be checked.

 

For SynZeal, the cause must remain unconfirmed until supported by investigation findings. For other facilities, the absence of that report is no reason to postpone examining comparable hazards in their own operations.

The most useful question is: What must remain under control for this process to stay safe—and how will we know when that control is being lost?

 

Independent technical review based on the public sources linked. The scenarios and recommendations are an individual assessment, not findings about the SynZeal installation.

 

HSE-RM SOLUTIONS
Your Partner In Safety...

Copper Sugar Mill water tank collapse and industrial safety lessons

  Copper Sugar Mill water tank collapse and industrial safety lessons   HSE-RM SOLUTIONS | Technical learning review | 8 November 2026 ...