Rail accident
On 3 February 2003, a Comeng electric multiple unit train rolled away from Broadmeadows station in Melbourne, Australia, before it ran for nearly out of control without a driver and eventually crashed into another train about to depart Spencer Street station. Train controllers attempted several times to stop or redirect the train, but were limited in their ability to intervene, instead being forced to alter the route of other trains to avert a more serious collision. Eleven people on board the stationary train were injured; authorities did not know until after the crash if any passengers were on board the runaway. An investigation identified driver error as the cause of the accident, but the runaway event prompted significant debate about the role of government authorities and private operators in ensuring safety and reliability on the Melbourne rail network.
Background.
Three days prior to the Melbourne crash, the Waterfall rail accident in New South Wales had killed seven people as a result of the train entering a curve too quickly due to incapacitation of the train's driver. The trains deadman's system was revealed to be faulty thus not automatically stopping the train when the driver became unresponsive.
The Broadmeadows railway line is an electrified line on the Melbourne rail network, running from the city centre to the northern suburbs. In February 2003, electric train services on the line were operated by M ;Train, a subsidiary of British transport company National Express, under a franchise arrangement with the Victorian Government. The line was shared with diesel-hauled country train services operated by V/Line (then also a subsidiary of National Express) and Hoys Roadlines, and occasional freight services.
Spencer Street station (now Southern Cross) is one of the two main terminal stations on the Victorian rail network, and, in 2003, was the interchange for trains run by a number of operators, including M ;Train, its fellow suburban operator Connex Melbourne, and country and interstate train operators V/Line, Hoys, West Coast Rail, CountryLink and Great Southern Rail. The station consisted of 14 platforms including dead-end platforms 1 to 8.
Given the number of operators on the Broadmeadows line (now the Craigieburn line) and in the central area, a complex control and signalling system was in place. Most of the Broadmeadows line was controlled by Metrol, the main suburban control centre managed by Connex, either directly or through local signal boxes along the route. Metrol was responsible for trains up to the station boundary, from where it was possible to access all 8 dead-end platforms. However, final access to platforms 1 through 6 at Spencer Street was controlled by V/Line staff at Spencer Street No.1 signal box, and platforms 7 and 8 were jointly managed by the two control centres.
The electric train involved in the accident was a 3-carriage Comeng electric multiple unit, and consisted of motor car 393M, unpowered trailer 1048T, and second motor car 394M. The country train was 4 H type carriages hauled by diesel-powered N class locomotive 463.
Accident.
Initial runaway.
The electric train 393M-1048T-394M arrived at Broadmeadows station as train number 5859 from Flinders Street around 9.14pm, where the service terminated. The driver of 5859 was rostered to also drive the return service to Flinders Street as train number 5264. After a short delay where he left the driving cab of 393M due to confusion about whether the train needed to be clear of the platform for a through service, the driver re-entered the cab to enter the new train number into the train's computer terminal, in order to display the correct onboard passenger information. At the same time, the signaller at Broadmeadows set the train's route for its return journey and cleared the necessary signals. The driver then isolated the train's air brake according to normal procedure, but did not apply the park brake before once again leaving the cab of 393M to change ends as it was policy not to apply it if changing ends.
The driver walked into the station building, intending to use the staff toilet facilities before returning to the train. As he did so, the train began to roll down the very slight slope at the Broadmeadows platform back towards the city, passing the end of the platform at around undetected by the driver or station staff. The doors to the passenger area were open, and interior lights remained on. While the driver was inside the station building, a passenger complained to the Broadmeadows stationmaster that 5264 had departed early. The stationmaster attempted to contact the driver via the Broadmeadows signaller, but was not able to work out why the train had departed early. As he returned to the station building, the stationmaster saw the driver coming out and warned him that the train had left.
The driver ran out onto the platform where another passenger told him it’s in the direction of the city, the driver jumped in the truck and began to chase the train down the line on foot but, as the train had now been rolling for some 3 minutes, he was unable to catch it, and rang the Broadmeadows signaller from a phone box on a signal post raising the alarm. The signaller made an emergency call to Metrol and advised them of the runaway at 9:21 p.m. Metrol immediately contacted the Broadmeadows stationmaster and asked him to monitor the closed-circuit television feed at stations under his control to provide updates on the train's progress. Next, the controllers rang the stationmaster at Essendon and asked him to switch his station from Metrol operation to local control, and to provide updates from his own CCTV feed. The train was by now travelling at a speed of more than .
At 9:26 p.m., Metrol made two calls to other control centres. The first was to Electrol, the electricity control centre for the suburban railway network, asking officers to turn off power to the overhead lines in the hope that this might help slow the train but this did not work. However, another stopping-all-stations train, number 5262, was ahead of the runaway and unaware of the danger; after a minute's discussion, Electrol isolated a section of power behind 5262 and ahead of the runaway. The second call was made to signallers at Spencer Street No. 1 Box, warning them that Metrol was considering routing the runaway 5264 into the station precinct on an empty platform. The signallers advised Metrol that all the dead-end platforms at Spencer Street were occupied, but Metrol ended the call abruptly without any clear plan of action. The later report into the accident found that the contents of the call suggested neither Metrol nor the Spencer Street staff understood the gravity of the situation at this point in time.
Seconds later, the Essendon stationmaster reported that the train had passed through his station at speed, making it clear that the lack of power was not going to stop the train. Metrol officers began to realise that a rear-end collision with 5262 was likely unless immediate action was taken. Consequently, the route set for 5262 was cancelled at 9:28 p.m., causing the driver to pull up at a red signal just outside North Melbourne station.
Near miss.
By the time 5264 arrived at Kensington at 9:30 p.m. it was only 113 seconds behind 5262, putting both trains in grave danger. Asking the driver of 5262 to attempt to outrun the runaway would have placed the passenger-carrying train at great risk of a derailment, meaning Metrol's only option was to divert the runaway before it could collide with 5262. Even then, the options open to the controllers were limited: one possible route would have sent the speeding train onto a flying junction, with the possibility of it falling onto other active lines below; another route into goods sidings was blocked by a train in the opposite direction; and diversion into the underground City Loop was prevented by both oncoming trains and the arrangement of tracks near the entrance at North Melbourne.
Metrol officers opted to reroute 5262 from the "east suburban line" to the adjacent tracks of the "main suburban line", with the intention of immediately switching back the points so that 5264 continued on the east suburban line towards Spencer Street. The driver of 5262 was informed of the emergency and told to run through North Melbourne station as quickly as possible when the signal cleared. Had the driver of 5262 attempted to pass the red signal, the train stop device would have applied the emergency brake, trapping his train in the path of the runaway.
At 9:30 p.m. the points were set and the signal cleared for 5262; at the same moment, the driver saw 5264 in his rear-view mirror and accelerated rapidly through the points, far beyond their design speed. As soon as officers at Metrol received an indication that the rear of the train had cleared the junction, the points were reversed for 5264. Briefly, however, it appeared that the diversion had been unsuccessful and a major collision had occurred: the signallers' indications showed the two trains on the same path, and controllers could not raise the driver of 5262 on the radio. Eventually, the driver contacted Metrol and told the controllers the runaway had sped past him and continued into North Melbourne station. Later calculations showed that disaster had been averted by less than a second.
Collision at Spencer Street.
Meanwhile, Metrol officers had again contacted the Spencer Street signallers to confirm their intention to route the runaway into the dead-end platforms. Allowing the train to continue on Metrol-operated tracks was not a desirable option. The East Suburban line led to a number of routes which presented the risk of catastrophic outcomes: the empty dead-end platform 8, which had only short stop blocks that could have allowed the body of the derailed train to "spear" over the top and into the passenger area of the station; sidings beyond platform 8 which were too complicated to access in the short time-frame available; and through tracks 10, 10A and 11, which would have directed the runaway into the extremely busy area around Flinders Street station, the main suburban terminus. Dead-end platform 7 was also accessible from the East Suburban line, and was occupied only by empty carriages stabled overnight for a service the following morning, but Metrol officers did not come to know this in the short decision-making time available.
A hasty agreement had been reached at 9:29 p.m. between Metrol and the Spencer Street staff that the runaway would thus be routed off the East Suburban line and onto the Country line in order to access the remainder of the dead-end platform area. All six platforms controlled by the No. 1 Box were occupied, some by empty services and others by services preparing to depart the station. The signallers had pre-set points and signals for the trains which were nearing their departure time. In order of departure, these trains were: a V/Line service to Bacchus Marsh, in platform 2; a service to Geelong in platform 4; a service to Kyneton in platform 6; and lastly "The Overland", waiting in platform 1. The signallers were hopeful that "The Overland" would depart before the arrival of the runaway, because it was set to use the Country line out of the station. At 9:30 p.m. however, Metrol advised the No. 1 Box that the runaway was extremely close; in response, the signallers told Metrol to route it onto the East Country line instead. The points on the East Country line had been set for the departure of the Bacchus Marsh train. At 9.31, a Spencer Street signaller spotted the runaway and told Metrol "I've got him, I see him, fucking hell he's coming up hard", and urgently tried to force the points away from the Bacchus Marsh train, but was prevented by a safety timer on the signal box equipment.
About 45 seconds prior to the impact, Metrol desperately attempted to contact platform staff at the station to warn them of the impending collision. However, platform staff were confused by the simultaneous arrival of a train on platform 14 and incorrectly assumed this was the runaway. As a result, no warning was made to passengers on or near the Bacchus Marsh train. The driver of the Bacchus Marsh train, Michael McCormack, did not initially realise the severity of the situation when the runaway approached, assuming that it was performing a normal shunting move; he