Gare de Lyon rail accident

In 1988, the underground suburban station beneath Gare de Lyon still had a provisional configuration, with four dead-end platform tracks 320 m (1,050 ft) long terminating at buffer stops, pending the completion of the RER D interconnection, which entered service in September 1995. Trains reached the underground platforms via two steeply graded approach routes with gradients of up to 43 per mille (4.3%).^[5]

The service between Melun and Paris was operated with SNCF Class Z 5300 electric multiple units. Shortly before the accident, the SNCF had introduced a new summer timetable under which inbound train 153944 ran semi-fast between Villeneuve-Saint-Georges and Paris, no longer stopping at Le Vert de Maisons station.^[7]

On 27 June 1988, train 153944, formed of two Z 5300 units, was running from Melun to Gare de Lyon. As it passed through Le Vert de Maisons without stopping, a passenger who had boarded the train unaware of the timetable change pulled the emergency alarm in order to alight there, bringing the train to a stop with its brakes automatically locked on.^[7][8]

The driver, Daniel Saulin, left his cab to reset the alarm mechanism, located between the leading motor car and the first trailer. While doing so, he also inadvertently closed a main brake pipe ("conduite générale") isolating cock situated next to the sluggish reset handle, an error later attributed in part to the non-standard design of the valve fitted to this rolling stock. Closing the cock isolated the brake pipe of the seven trailer cars from the motor car, preventing brake pressure from being restored behind the first vehicle.^[9]

Believing the locked brakes to be the result of an overpressure fault sometimes encountered on this class after an alarm reset, Saulin, assisted by his guard, bled the main and auxiliary air reservoirs of the seven trailer cars rather than calling for an engineer as SNCF regulations required. This released the brakes but left the trailers without any braking capability; because the isolating cock was closed, the pressure gauges in the cab read a normal 8 bars, reflecting only the motor car's own circuit.^[9][8] The stop had delayed the train by 26 minutes, and to recover time, the traffic control centre at Gare de Lyon instructed Saulin to run through Maisons-Alfort–Alfortville, the last stop before the terminal.^[8]

Saulin only discovered the loss of braking after committing to the long descent towards the underground station, about two kilometres from the buffer stops, when the first braking application took no effect. With only the leading motor car able to brake, its wheels locked and slid under the emergency application.^[10] Saulin radioed the control centre requesting an emergency stop of all trains but failed to identify himself or his train, and also triggered the general radio alarm, which halted all trains within a ten-kilometre radius. The resulting flood of enquiry calls from stopped drivers saturated the control centre's communication lines, and controllers were unable to identify the runaway before the collision, which occurred less than two minutes after the alert. Saulin directed his passengers to the rear car of the train and took refuge there with them.^[9][7]

The underground signal box, on receiving the radio alarm, applied the prescribed general closure procedure, setting all signals to danger and freezing the points in their current positions, permitting only manual operation. This cancelled the automatic routing that would have sent the runaway into an unoccupied platform track; instead, the frozen points directed it into Platform 2, occupied by outbound train 153951, which was running late and heavily loaded, particularly in its first car facing the platform stairs.^[7] Accelerating on the falling gradient from roughly 30 km/h (19 mph) to about 70 km/h (43 mph), train 153944 struck the stationary train, pushing it back nearly thirty metres. The leading trailer of the stationary train, ZRx 15339, was crushed as the motor car of the runaway overrode it, the low tunnel roof leaving no escape path; only two occupants of that car survived.^[2][7]

The driver of the stationary train, André Tanguy, seeing the runaway approaching, remained in his cab and repeatedly ordered his passengers over the intercom to evacuate immediately, continuing his announcements until the moment of impact. His actions are credited with saving dozens of lives at the cost of his own.^[2]

Initial suspicion fell on terrorism, owing to a recent series of bombings targeting French trains around Paris, a theory reinforced when investigators found the main brake pipe isolating cock behind the first car closed. However, investigators reasoned that only someone with detailed knowledge of the braking system could have closed it.^[8]

The identity of the person who had pulled the emergency alarm was initially unknown. After a newspaper appeal, a young mother came forward and told investigators she had pulled the alarm on realising the train would not make its usual stop at Le Vert de Maisons, where she collected her children from school. She was fined 1,000 francs.^[1][8]

Re-examination of Saulin's account revealed that, struggling with the stiff alarm reset handle, he had braced himself against the adjacent brake pipe cock for leverage, inadvertently closing it. The investigation also identified several missed opportunities to avert the disaster. An expert from the Institut national de recherche sur les transports et leur sécurité (INRETS), Jean-Pierre Pascal, calculated that use of the train's rheostatic (dynamic) brake, within reach on the driving desk, would very probably have slowed the train enough to avoid a major catastrophe. Drivers of the Z 5300 class were, however, reluctant to use the rheostatic brake because of the risk of wheel slide when combined with the air brake, and the expert concluded that Saulin, unaware that only the motor car could brake, had omitted to use it under stress.^[11][10] The signallers were also criticised for mechanically applying the general closure procedure without redirecting the runaway to a free track, and for failing to have the occupied platforms evacuated even though the station announcer was present in the signal box.^[9]

The case came before the Paris criminal court in late 1992. Saulin was convicted of manslaughter and sentenced to four years' imprisonment, of which six months were unsuspended; the guard of the struck train received a six-month suspended sentence for his late arrival, which had delayed the outbound service and contributed to its overcrowding, while the signallers and the passenger who had pulled the alarm received nominal penalties.^[1][8] The day after the verdict, the majority of SNCF drivers and train crew staged a 24-hour strike, claiming Saulin had been made a scapegoat for outdated equipment, overly tight scheduling, and railway mismanagement, a walkout that drew indignation from victims' families.^[8]

On appeal in 1993, the sentences were substantially reduced: Saulin received a six-month suspended sentence, the passenger a nominal penalty, and the other railway employees were acquitted. The appeal court found that the brake isolating cocks fitted to this rolling stock did not conform to the standards of the period; had they been compliant, the closed position of the cock might have been apparent to the driver despite the pressure of the situation.^[12]

On 6 August 1988, barely six weeks after the disaster, a train arriving at Gare de l'Est struck the buffer stop at 30 km/h (19 mph), killing one passenger and injuring 56. The two accidents in quick succession reignited public controversy over rail safety, and the government obtained the resignation of SNCF president Philippe Rouvillois, who was replaced on 24 August by Jacques Fournier.^[13]

Both accidents were the subject of ministerial commissions of inquiry, whose reports were made public, and the SNCF was directed to draw up a safety improvement programme, finalised in October 1988, containing numerous immediate measures intended to prevent a recurrence. A Délégation générale de la sécurité (general safety directorate) was subsequently created within the SNCF, tasked with analysing all incidents with a direct bearing on safety across the network.^[6] The SNCF also re-examined its operating regulations to address runaway-train scenarios and reinforced the psychological testing of drivers.^[7]

Following the accident, the SNCF installed new energy-absorbing sliding buffer stops on the four dead-end tracks of the underground station, an adaptation to railway use of the arresting gear employed on aircraft carrier decks. The system was validated in trials in which four 2D2 9100 locomotives were run into the buffers at 30 km/h (19 mph), and the new design was progressively installed at dead-end termini across the French network.^[5] The provisional dead-end configuration of the underground station itself ended with the opening of the RER D interconnection in September 1995.^[5]

The trials and their outcome led Jacques Bresson, who had lost his eldest son in the accident, to found a victims' association in 1994, which became the Fédération nationale des victimes d'attentats et d'accidents collectifs (FENVAC), a national support network for victims of disasters and attacks.^[14][2]

The accident was featured in season 2 of the National Geographic Channel documentary series Seconds From Disaster in the episode Paris Train Crash (also known as Runaway Train), broadcast in France as Catastrophe à la Gare de Lyon in the series La Minute de vérité. It was also covered in the UK documentary series Built From Disaster (episode "Trains"), and in the French documentary series Hors de contrôle ("Collision à la gare de Lyon", RMC Découverte, 2017).^[15]

On radio, the accident was the subject of "Le train fou de la Gare de Lyon", an episode of Affaires sensibles presented by Fabrice Drouelle on France Inter (2 March 2020),^[16] and of "La catastrophe était sur les rails", an episode of Superfail by Guillaume Erner on France Culture (4 September 2022).^[17]

• Lists of rail accidents
• Gare de l'Est rail accident