West of Shetland a rig let 1 blowout preventer fall thirty six hundred feet to the seabed when a single motor tripped, and the emergency brakes were built to slow a load rather than stop one
At nine on an April evening in British waters, a drilling crew was threading a stack of pressure control equipment down through the water column.
It was running on one of the vessel’s two hoisting machines.
Everything was routine until a single motor tripped.
It works in water depths to about 9,800 feet and drills to roughly thirty five thousand, which puts it among the more capable units in the North Atlantic.
Then three more followed in quick succession, and the machine lost all drive power at once.
How one motor took down a load rated far above it
Four motors drive that winch. The arrangement exists so that no single failure matters.
The sequence is what mattered here.
The initial fault propagated through the shared electrical circuit fast enough that the remaining motors never compensated, and the system registered a total loss of drive.
That took out control of the top drive and the main brake system in the same instant. Both hung off the same supply.
Emergency disc brakes did engage.
They were not enough, because a brake of that type is rated for dynamic loads under controlled deceleration rather than for the instantaneous arrest of a mass at full weight.
Roughly 716 tons hung on the hook. Nothing about that was unusual.
What went down and what it broke on the way
The blowout preventer fell with about 400 feet of riser attached and came to rest on the seabed some thirty six hundred feet below. The whole descent took seconds.
The damage above the waterline is the part that shaped everything afterward.
Wire rope was pulled off the main winch drum with enough force to fail through the upper levels of the drawworks, whipping as it went and damaging surrounding structure and equipment.
The flailing rope did more harm on the way out than the stack did on the way down, and repairing that is what the calendar went on.
Nobody was hurt and the rig itself stayed sound. But that secondary damage, rather than the retrieval, is what turned a recovery job into a months long stoppage.
What the investigation recorded, and where it happened
A British safety regulator investigated, which is the detail that settles the geography. This was a field west of Shetland in United Kingdom waters, not the Norwegian shelf.
The regulator wrote that a single motor failure triggered the uncontrolled descent. Its finding was published roughly two months after the event.
The regulator also recorded that the incident created a significant risk of harm to people from falling debris, even though nobody was injured. Debris of that size does not need a target.
The same vessel had form. In an earlier incident on the Norwegian shelf, one of its cranes dropped a slip joint of about 39 tons during hoisting and damaged a supply vessel below.
Norway’s petroleum safety authority put that one down to an inaccurate weight on the cargo manifest and to repeated lift attempts after automatic overload protection had already triggered and been worked around.
Two incidents, two mechanisms, both centered on a heavy load and a control system reaching its limit.
The machine, and the spare that saved the schedule
The rig is a sixth generation semi submersible, dynamically positioned, built on an enhanced hull design and in service since 2009. It carries two derricks, which matters here.
It works in water depths to about 9,800 feet and drills to roughly thirty five thousand, which puts it among the more capable units in the North Atlantic. Very few rigs on either shelf reach that far down.
Its dual hoisting arrangement lets it run two operations at once. That cuts time on heavy subsea jobs and concentrates the risk in whichever machine is carrying the load, which is exactly what happened.
After recovery the contractor took the rig to a yard and fitted a spare stack out of its own inventory, and the estimate of three to four months held almost exactly.
Without that spare, lead times on a replacement of this rating run to many months, and North Sea programs that finish ahead of schedule are rare enough as it is.
What the drop leaves open
The rig went back on contract on the third of August after 106 days out of service. Insurance covers recovery, replacement and the repair work.
The cause of that first motor trip is still the unanswered question. The regulator identified the cascade without naming the root trigger publicly.
Whether it was an electrical fault, a load sensing error or a maintenance condition inside the motor determines which other drawworks in the region carry the same latent risk. Nobody has said which.
There is a second question about how brakes get specified.
A rating derived from gradual slowdown always underperforms when a cascade removes every motor in seconds, and that gap is where engineering reviews on similar rigs are now pointed.
Meanwhile the deepwater business keeps raising what it asks of this hardware, with a deepwater field off Louisiana now producing through rock at twenty thousand pounds per square inch, which is a great deal of pressure to hold back with a stack somebody has to lower on a wire.
Hugo is an engineer with strong technical expertise. Multilingual from an early age, his writing combines technical clarity with a strong interest in science and energy.
