Clapham Junction, 1988: A Wire Count That Nobody Carried Out
The 1988 Clapham Junction rail crash began with one technician's wiring slip and ended with 35 deaths. The Hidden inquiry put most of the weight on the missing second check.
In this article10 sections
The cutting south of Clapham Junction station bends left under a steep bank, and on the Up Main line into Waterloo a driver coming round that bend cannot see far ahead. On Monday, 12 December 1988, the driver of the 06:14 Poole train came round it at about 08:10 and found the stationary 07:18 Basingstoke service in front of him.
The Clapham Junction rail crash was caused by a redundant signal wire that had been left connected at one end and loose at the other during a wiring alteration two weeks earlier. It later fell back onto its old terminal and made signal WF138 show a proceed aspect when it should have shown red. Anthony Hidden QC, who led the official inquiry, held that the technician’s errors were the direct cause, and that an independent check by someone other than the installer, demanded by British Rail’s own instructions, would have prevented the accident. Nobody carried that check out.
What the wire did, and what happened to it
Hidden’s report (Investigation into the Clapham Junction Railway Accident, Cm 820, HMSO, November 1989) puts the toll at 35 dead, 33 on the day and two more before the hearing opened. Sixty-nine people were seriously injured and 415 had minor injuries. All of the dead were in the first two coaches of the Poole train. The Poole train struck the rear of the Basingstoke train and was then deflected into a third, empty, train running out of Waterloo to Haslemere.
The cause sat in a relay room. On Sunday, 27 November 1988, a senior technician, Brian Hemingway, replaced the old signal WA25 with the new WF138. Part of the job was to connect new wires and take out an old one running between a track repeater relay (TRR DM) and a fuse. The old wire had to be disconnected at both ends. Hemingway left it connected at the fuse end. At the relay end he disconnected it, did not cut it back, and pushed it aside. Hidden found he had not taped it either.
The report describes a safe alternative to removing a wire outright, because the insulation on neighbouring wires was brittle. Cut it back so it can never reach its old terminal, tape the end, and tie it somewhere out of the way. None of the three was done.
The error then waited two weeks. On Sunday, 11 December, Hemingway changed an unrelated relay, TRR DN, which sat immediately to the left of TRR DM. Handling it disturbed the wiring beside it, and the old wire moved back to touch its old terminal. The false feed of current meant that a train’s wheels, which should have made WF138 turn red, no longer did.
Hidden judged the two jobs “simplicity itself” for a competent technician, under half an hour with accurate drawings (7.25). The drawings were incomplete but held no error.
Was the technician tired? The report’s answer is narrower than the headlines
Accounts of his hours differ. Wikipedia says Hemingway was in his 13th consecutive seven-day week. The inquiry report says something slightly different. At paragraph 16.11 Hidden finds that “in the three months before the accident he had had one sole day off in the entire 13 weeks.” The primary text settles it: one day off in thirteen weeks, not none. The same report records sample figures for the thirteen weeks before the accident in which 28% of the workforce worked seven days every week and another 34% worked 13 days out of 14 (8.54). Hemingway had roughly doubled his annual income, from about £8,000 to £16,000, through overtime, and liked seeing through jobs he had prepared in the week.
The inquiry did not call that exhaustion. Hemingway himself told the court that his hours had not affected him and declined to blame tiredness. Hidden accepted that he did not feel tired, and rejected a submission that the workforce was overworked and exhausted during the week (8.57, 16.13). What he found instead was a narrower claim. A man Hidden described as not prone to lapses of concentration had made uncharacteristic errors, and “it is more likely than not” that his work programme was the trigger for them (8.26). The explanation Hidden proposed was the “blunting of the sharp edge of close attention,” produced by working every day without days off.
There was an immediate prompt as well. Hidden accepted that Hemingway was interrupted at the point where he had connected the new yellow wire, moved the old black one out of the way, and was about to deal with it. Someone from the outside team came in with a problem about the outside drawings, and Hemingway helped. Afterwards he believed he had finished. Hidden’s reading: a man with a fresh mind would have taken the interruption in his stride and gone straight back.
That distinction matters for how this case should be used. Other industries cap hours by rule, as nuclear control rooms do, and Hidden’s recommendation 18 asked only for monitoring. It does not show that tired people make errors. It is a finding about one man, made by an inquiry that weighed the evidence on tiredness and kept only a narrow version of it. It does show how a plausible lapse of attention gets through a process that has no second pair of eyes.
The check that was supposed to catch it
Hemingway’s own account of the checking he expected is the most useful evidence in the report. He did not expect anyone to look at his work. He said nobody had ever counted the wires after him (7.22). He did his own wire count as he went, not as a final pass, and nobody had ever taught him the importance of an independent one (8.30). Hidden notes that Hemingway had time that afternoon, with hours of waiting before testing began and two colleagues nearby, to run a count of his own work, and that doing so would have taken him back to the fuse end and shown him the unfinished job (8.29). It would not have been independent, but it might have worked.
Hidden’s account of why the independent version matters is blunt. “The installer who makes an error may, when he looks at the work, miss the error he has made. He may see what he thought he had done, and meant to do, not what he has in fact done” (8.27). He describes a wire count as a check of the number of wires on each terminal against the wiring diagram, done by an independent person, whose purpose is to make sure there are no extraneous connections (8.28). Had one been done, the second wire on fuse 107 could not have been missed.
| What the check was meant to catch | Who was meant to do it | What happened |
|---|---|---|
| An old wire still connected or loose | The installer, looking back at his own work | Hemingway counted as he went, not afterwards; he believed the job finished after an interruption |
| The same wire, by eye, on the relay top and at the fuse | The supervisor, Bumstead | Bumstead spent the day leading an outside gang and did not enter the relay room |
| Extra wires against the diagram (the wire count) | Someone other than the installer, before the line reopened; responsibility lay with the Testing and Commissioning Engineer, Peter Dray | Dray carried out neither the wire count nor a buzzer test and waited in the signal box; no one did it |
| Whether the circuits behaved correctly under varied conditions | The functional test | Dray later accepted that a functional test could not by itself ensure safety |
Two features of the table are mine, not Hidden’s. First, each row depends on a person standing in a different place. Row one is the only check the technician could have made alone, and it is the one most likely to fail alongside the error, because the same lapse of attention that leaves a wire loose also leaves the reviewer believing the job is finished. Second, a rough illustration with invented numbers shows how quickly “several checks” turns into one. If the error has a 5% chance of occurring and three independent checks each catch 90% of the errors that reach them, the chance an error survives all three is 5% x 0.1 x 0.1 x 0.1, or 0.005%. Remove two of the checks, and the chance becomes 5% x 0.1, or 0.5%, a hundredfold increase. Let the first check be correlated with the error, so that it nearly always fails when an error has occurred, and the surviving check carries the whole burden. The figures are hypothetical and are not from the inquiry. The shape of the arithmetic is the point.
Rules that existed, and practice that ignored them
British Rail’s rules were not silent. Departmental Instruction SL-53, “Testing New and Altered Signalling”, issued by the Southern Region S&T Department on 11 May 1987, required in paragraph 4.4 a wire count on all free-wired safety relays and terminations. An earlier instruction, SL-Provisional, issued in autumn 1985, said the same. Bumstead said he had received neither, and Hidden accepted that, finding that he should have (8.39 to 8.40). Dray, the tester, told the inquiry he made no attempt to put SL-53 into practice, adding that “nobody senior to me was making sure I did” (9.15).
Hidden did not treat this as a rogue individual. He wrote that Bumstead was at fault, “but the fault of the system was graver” (8.41). The reasons Bumstead gave for not asking for a count were that he expected Hemingway to count his own work, that installers checking their own work had been general practice for years, and that no one had told him independent counts were required for the resignalling scheme (8.38).
The most striking part of the history is that the same near-miss had happened before. In November 1985, signal OD7 at Oxted displayed green when it should not have, because of two separate wiring faults, one of them two wires connected to the same terminal of a relay. Hidden says a wire count would have found it and that none had been done. The Oxted inquiry of 20 November 1985 concluded that wire counts must be carried out. A letter of 10 February 1986 said the same to the signal construction engineers at all four depots, and a meeting on 6 March 1986 minuted the instruction “Following any installation work a wire count of all the affected equipment must be made before commissioning” (9.48 to 9.58). Hidden’s verdict on why it did not take hold: “The lesson was never learned for the simple reason that it was never properly taught” (9.59). A further wrong-side failure at Queenstown Road on 14 June 1988, six months before the crash, was also traced partly to testing (9.62 to 9.64). The Oxted report itself had already described “a downward drift in the standards of production and checking” (9.56).
Where the blame went
Hidden was careful, in a chapter that names individuals, to say the inquiry was not a trial and the names were not a charge sheet (16.1, 16.4). Of Hemingway, he wrote that the direct cause was his wiring errors (16.5), but also that “from first to last” he accepted responsibility without excuse (16.7), and that his habits of not cutting back or securing wires belonged to British Rail collectively. A barrister for BR had told him the blame for those practices lay with the employer, not with him, and the report quotes that (16.8). On the missing independent count: “The responsibility for the accident does not for a moment lie, as Mr Hemingway seemed to believe it did, solely upon his shoulders” (8.33).
The recommendations followed that logic. Number 1 required rigorous cutting back, insulating and securing of redundant wires before commissioning. Number 4 required BR to ensure an independent wire count as a matter of practice during testing, with the person in overall charge of testing responsible for ensuring and documenting it, and permitted delegation to works staff who did not do the work. Number 18 required overtime to be monitored.
Loose ends, answered
What is a wrong-side failure in signalling?
Hidden’s report separates failures that leave a signal more cautious than it should be (right-side) from those that leave it less cautious (wrong-side). A false feed of current makes a signal unable to detect the train it guards, so it keeps showing a proceed aspect. The report calls such a failure the opposite of the fail-safe philosophy a signalling engineer works to.
Why did the wire count belong to works staff and not to testing specialists?
Chapter 11 of the report describes a hierarchy of prestige inside British Rail’s Signals and Telecommunications department. Functional testing, the challenging test that tries to catch out a circuit under varied conditions, carried status. Routine tests, the wire count named as the obvious example, were often delegated to works staff. Recommendation 4 keeps that delegation but requires that the person doing the count did not do the work.
Which recommendations dealt with the human side of the failure?
Recommendation 18 required overtime to be monitored so that no individual works excessive levels. Recommendation 19 called for scheduled hours for weekend work, to be introduced with the unions. Recommendations 12 and 13 covered personal distribution of Departmental Instructions and a signed statement every two years, at appraisal, that the instructions had been read and understood.
What this transfers to, and what I could not check
This is a case about a railway installation in 1988, so the general lesson is a modest one. When the person who does the work is also the only person who verifies it, the check fails exactly when the work does, and tiredness is one of several reasons the work fails. That is an argument for independence in the check, not an argument that fatigue was the cause here. Hidden gave fatigue a contributory role, not the lead one. For another investigation that weighed fatigue against what oversight failed to do, see the 2003 Staten Island ferry crash; for who can stop a checklist, see the Michigan and Ontario results. James Reason’s Swiss cheese picture, applied to a missed 6 a.m. in a four-slice example, frames the same lesson: one lapse gets through only when other defences have holes too.
One brief analogy, flagged as such. If anything in your own week is done and then checked by the same tired person, the shape is the same, and a friend who sees the result is a cheap second check; DontSnooze is the alarm app that arranges that for mornings. A person who has just been woken and decides for themselves whether they are properly awake is in Hemingway’s position at the relay rack: the same mind did the thing and is judging the result. I am not claiming sleep inertia works like a signalling fault, only that the shape of the checking problem is the same.
What I did not verify. I read the Hidden report from the JESIP-hosted scanned PDF (with some optical-recognition damage, and a corrections page adding recommendations 29 and 30), and checked the figures and quotations above against it. I did not reach the CIRAS article “Watching the weak signals: Clapham and the corporate memory”, nor any HSE, RAIB or ORR retrospective, so I cannot say how later bodies characterised the findings or how fully the 1989 recommendations were carried out. Wikipedia’s “13th consecutive seven-day week” line is cited only as a pointer to the discrepancy. I did not independently confirm the pay figures beyond the report’s own text.