One failed electrical bus at a Michigan lakeside plant killed a 1,150-megawatt reactor’s protection system power, and the chain of events it set off shows how a single lockout can cascade through three separate systems
At 6:27 on a July evening, a single electrical bus at a Michigan lakeside plant locked out without warning.
What followed was a cascade that no single component was designed to prevent alone.
A transformer dropped off the grid, and for a brief but critical moment, both power sources feeding the reactor protection system went dark simultaneously.
A bus lockout can originate in a relay misoperation, a fault on connected equipment, or a protection system responding to a disturbance elsewhere in the switchyard.
The reactor’s own safety logic did exactly what it was built to do: it shut itself down.
But the sequence that led to that moment raises a question engineers are still working to answer: how did one upstream bus reach both independent feeds at once?
When a bus locks out, everything downstream loses its footing
A reactor protection system, or RPS, is the network of sensors, relays and power supplies that monitors a reactor’s vital signs and throws the emergency brake if any reading strays out of bounds. It runs on dedicated electrical buses, separate from the plant’s main power circuits, so a disturbance on one side of the switchyard cannot reach it.
That separation is the first barrier between normal operations and an unplanned shutdown. At Fermi 2, the path from bus 101 to the RPS runs through an intermediate step: a station service transformer identified in plant records as transformer 64. The bus 101 lockout knocked out that transformer, and the loss cascaded forward.
Because transformer 64 sat between bus 101 and both RPS feeds, losing it meant losing both power sources together, however briefly. When both feeds vanish simultaneously, the system’s trip logic reads that as a command to shut the reactor down. One bus, one transformer, both feeds, one scram.
Lake Erie on a July weekend, and a reactor that had been running clean
Fermi 2 sits about 25 miles northeast of Toledo, Ohio, in Monroe County, Michigan, operating under a license that runs to 2045. It is a boiling water reactor that boils lake water directly into steam to spin its turbine, and at the moment of the event it was running at full rated output of 1,150 MW.
By mid-August the plant was back online at 100 percent of rated power, which underlines something important: the scram was a protection system working as intended, not a sign of deeper structural damage. Even so, the sequence exposed a real vulnerability. A single point on bus 101 was able to reach both RPS power feeds simultaneously, which is exactly the kind of common cause path that plant engineers spend considerable effort designing around.
What the NRC notification record shows, section by section
The operator reported that at approximately 6:27 p.m. EDT on July 3, Fermi 2 experienced a lockout of bus 101 resulting in the loss of transformer 64, followed by a momentary loss of both RPS bus power sources and a reactor scram. Both level 3 and level 2 isolation signals were received, and the event was described as uncomplicated.
Those isolation signals automatically close valves and seal the reactor building, standard procedure after any protection system actuation. The lowest water level observed during the transient was approximately 94.1 inches, confirming the fuel stayed covered and cool throughout.
Decay heat was removed by the main steam system routed to the condenser through the turbine bypass valves, and all control rods inserted fully into the core. Each outcome, bypass valves opening, steam flowing, every rod dropping home, happened without manual crew intervention, the system performing its designed function under an unplanned load.
The complication the cascade reveals
A scram described as uncomplicated by the operator is not the same as a scram with a simple cause. The NRC notification does not state what caused bus 101 to lock out in the first place, and that upstream cause is the open question the plant’s investigation still has to close. A bus lockout can originate in a relay misoperation, a fault on connected equipment, or a protection system responding to a disturbance elsewhere in the switchyard.
What is already visible is the topology: transformer 64 created a path by which a single upstream event could simultaneously deprive the protection system of both power feeds. Redundant feeds are designed to be independent, but independence is only as good as the common equipment they share. That principle connects directly to how one neutron sensor in an Illinois reactor tripped half its shutdown logic, a different mechanism but the same lesson about shared paths.
The Fermi 2 case also fits inside a broader pattern of electrical switchyard events at boiling water reactors, where a disturbance in one circuit can cross a boundary faster than crews can isolate it.
What comes next for the plant and the wider fleet
The open investigation into the bus 101 lockout will produce a licensee event report under federal rules, naming whether the root cause was equipment failure, relay calibration or something in the maintenance history of the bus or its protection logic. That document becomes part of the public record and enters the NRC’s operating experience database, where events from individual plants become raw material for fleet wide guidance.
That review process is how a July evening in Michigan can quietly improve the electrical protection architecture at a reactor in Georgia or Illinois. How advanced reactor designs approach electrical isolation reflects, in part, what events like this keep teaching the industry about common cause pathways.
For a fleet being asked to run longer and at higher capacity factors than ever before, the Fermi 2 sequence is a useful reminder that the transformers, buses and relays outside the reactor vessel carry real design risk. The reactor is back online. The open file on bus 101 is still worth watching.
Hugo is an engineer with strong technical expertise. Multilingual from an early age, his writing combines technical clarity with a strong interest in science and energy.
