|Boeing Engineer Says 737 Max Safety System Was Vetoed Over Cost|
A Boeing 737 Max in Renton, Wash. The company’s best-selling model remains grounded after two fatal crashes.CreditCreditRuth Fremson/The New York Times
By Natalie Kitroeff, David Gelles and Jack Nicas
Oct. 2, 2019Updated 10:06 a.m. ET
A senior Boeing engineer filed an internal ethics complaint this year saying that during the development of the 737 Max jet the company had rejected a safety system to minimize costs, equipment that he felt could have reduced risks that contributed to two fatal crashes.
Boeing has provided the complaint, which was reviewed by The New York Times, to the Department of Justice as part of a criminal investigation into the design of the Max, according to a person with knowledge of the inquiry who requested anonymity given the ongoing legal matter. Federal investigators have questioned at least one former Boeing employee about the allegations, said another person with knowledge of the discussions who similarly requested anonymity.
It is unclear what, if any, assessment investigators have made of the complaint.
The complaint, filed after the two crashes, builds on concerns about Boeing’s corporate culture, as the company tries to repair its reputation and get the planes flying again.
Many current and former Boeing employees have privately discussed problems with the design and decision-making process on the 737 Max, outlining episodes when managers dismissed engineers’ recommendations or prioritized profits. The engineer who filed the ethics concerns this year, Curtis Ewbank, went a step further, lodging a formal complaint and calling out the chief executive for publicly misrepresenting the safety of the plane.
During the development of the 737 Max, Mr. Ewbank worked on the cockpit systems that pilots use to monitor and control the airplane. In his complaint to Boeing, he said that managers were urged to study a backup system for calculating the plane’s airspeed. The system, known as synthetic airspeed, draws on several data sources to measure how fast a plane is flying.
Such equipment, Mr. Ewbank said, could detect when the angle-of-attack sensors, which measure the plane’s position in the sky, were malfunctioning and prevent other systems from relying on that faulty information. A version of the system is used on Boeing’s 787 Dreamliner, a new model of plane.
Mr. Ewbank did not respond to requests for comment.
In both crashes of the Max, an angle-of-attack sensor is believed to have failed, sending bad data to automated software designed to help prevent stalls. That software, known as MCAS, then activated erroneously, sending the planes into irrecoverable nose dives.
Mr. Ewbank noted in the complaint, “It is not possible to say for certain that any actual implementation of synthetic airspeed on the 737 Max would have prevented the accidents” in Ethiopia and Indonesia. But he said that Boeing’s actions on the issue pointed to a culture that emphasized profit in some cases, at the expense of safety.
Throughout the development of the Max, Boeing tried to avoid adding components that could force airlines to train pilots in flight simulators, costing tens of millions of dollars over the life of an aircraft. Significant changes to the Max could also have required the more onerous approval for a new plane, rather than the streamlined certification process for a derivative model.
The Dangerous Flaws in Boeing’s Automated SystemHere’s why a system designed to stabilize the 737 Max may have caused two deadly crashes in five months.
According to Mr. Ewbank’s complaint, Ray Craig, a chief test pilot of the 737, and other engineers wanted to study the possibility of adding the synthetic airspeed system to the Max. But a Boeing executive decided not to look into the matter because of its potential cost and effect on training requirements for pilots.
“I was willing to stand up for safety and quality, but was unable to actually have an effect in those areas,” Mr. Ewbank said in the complaint, adding, “Boeing management was more concerned with cost and schedule than safety or quality.”
His account, and the description of the system’s benefits on the 787 Dreamliner, was backed up by a former senior Boeing employee involved in the discussions who spoke on the condition of anonymity because of the continuing Justice Department investigation. The former Boeing employee, who worked on the Max, confirmed that executives had discussed the system. The employee said they had determined that trying to install such new technology onto the 737 Max, a plane based on a 1960s-era design, would be too complicated and risky for the project, which was on a tight development schedule.
But the former Boeing employee said that Mr. Ewbank’s complaint overstated the importance of such a system and understated the complexity of adding it to the 737 Max. This employee said that Boeing had only installed the system on the 787 Dreamliners, noting that it was unclear how or whether the Max could similarly calculate synthetic airspeed, because it has fewer sensors. The employee also did not recall Boeing executives citing the potential impact on pilot training when deciding not to study adding the system.
A Boeing spokesman, Gordon Johndroe, said in a statement, “Safety, quality and integrity are at the core of Boeing’s values.”
“Boeing offers its employees a number of channels for raising concerns and complaints and has rigorous processes in place, both to ensure that such complaints receive thorough consideration and to protect the confidentiality of employees who make them,” he added.
Shares of Boeing fell as much as 1.7% in early morning trading Wednesday.
Peter Carr, a spokesman for the Department of Justice, declined to comment on the complaint.
Mr. Ewbank worked as an engineer at Boeing from 2010 to 2015, and was generally well regarded by his colleagues, according to two people with knowledge of his work who requested anonymity to discuss a sensitive internal inquiry. In Mr. Ewbank’s complaint, he said he had left the company in part because he had become concerned that the company was not prioritizing safety. He returned to the company in 2018, where he is now working on the development of a new 777.
Mr. Ewbank said that he did not initially file a complaint during the development of the Max, in part because the “fear of retaliation is high.”
He stepped forward this year, he explained in the complaint, because of the “ethical imperative of an engineer — to protect the safety of the public.”
“Boeing is not in a business where safety can be treated as a secondary concern,” Mr. Ewbank wrote in the complaint. “But the current culture of expediency of design-to-market and cost cutting does not permit any other treatment by the work force tasked with making executive managements’ fever dreams a reality.”