← back to the reports
TT-008 Open road · Alcanar, Tarragona, Spain 1978

Los Alfaques disaster — An Overloaded Tanker, a BLEVE, and Some 215 Holidaymakers Dead

mechanicaltanker-truck1970s
Killed
~215 (some sources 217)
Vehicle
Propylene road tanker
Setting
Open road
Status
Mechanical

Summary

On the afternoon of 11 July 1978, a road tanker carrying liquefied propylene ruptured beside the Los Alfaques seaside campsite at Alcanar, in the province of Tarragona on Spain's Mediterranean coast, and detonated in a boiling-liquid expanding-vapour explosion that killed roughly 215 people and severely burned about 200 more. The dead were overwhelmingly holidaymakers — some 178 of them French — packed into a crowded July campground at the height of the season. It remains the deadliest road-transport and one of the deadliest civilian disasters in modern Spanish history.

The tanker, a Pegaso tractor unit hauling a Fruehauf trailer built in 1973, had left the ENPETROL refinery at La Pobla de Mafumet shortly after midday loaded with about 23.5 tonnes of propylene — close to four tonnes over the trailer's design limit of 19.35 tonnes. It had travelled roughly 102 kilometres south along the coastal N-340 when, at around 14:35 beside the campsite at kilometre 159, the overpressurised tank split open. The escaping liquefied gas flashed into a vapour cloud that ignited almost instantly; the fireball charred everything within a radius of hundreds of metres and gutted the great majority of the camping area, where families were eating lunch, swimming, and resting in caravans and tents.

The cause was reconstructed by a Spanish judicial investigation, not a transport-safety board — Spain had no NTSB-style highway investigator — and the inquiry fed directly into a 1982 criminal trial. Its findings were mechanical and organisational at once: the tank had been loaded well beyond its rated capacity, leaving almost no ullage space for the propylene to expand; it carried no emergency pressure-relief valve (a fitting once mandatory but not required under the rules in force in 1978); and the steel showed microscopic stress cracks consistent with prior corrosion from improperly pressurised anhydrous ammonia. Overloading, the inquiry established, was routine at the refinery — dozens of tanks had left overweight in the preceding months.

In 1982, four employees of ENPETROL and two of the tanker's operating company, Cisternas Reunidas S.A., were convicted of criminal negligence and sentenced to between one and four years' imprisonment. On appeal, four were released and the sentences were suspended or reduced. The two companies paid compensation equivalent to roughly €13.23 million to the victims and their families. The disaster prompted Spain to bar the daytime transit of dangerous-goods vehicles through populated areas, and it became a reference case in the international study of BLEVE hazards in road transport.

Timeline

December 1973
The trailer is built
The Fruehauf semi-trailer that will fail is manufactured; over its life it carries pressurised gases including, at times, anhydrous ammonia.
3 Jan – 7 Jul 1978
A pattern of overloading
The later inquiry establishes that in this period some 32 tank loads left the Tarragona-area refinery overweight, driven by several different operators.
11 July 1978, ~12:05
Departure, already overloaded
The Pegaso–Fruehauf tanker, driven by Francisco Imbernón Villena, 50, leaves the ENPETROL refinery at La Pobla de Mafumet with about 23.5 tonnes of liquefied propylene — roughly four tonnes over its 19.35-tonne design limit.
Afternoon
Down the coast road
The tanker runs about 102 kilometres south on the N-340, the busy coastal highway, rather than the parallel motorway, passing through and beside populated holiday areas.
~14:35–14:36
The tank splits
Beside the Los Alfaques campsite at N-340 km 159, near Alcanar, the overpressurised tank ruptures; the driver's watch later stops at 14:36.
Seconds later
The BLEVE
The liquefied propylene flashes to vapour, forms a cloud, and ignites in a boiling-liquid expanding-vapour explosion — a fireball reaching well over 1,000 °C.
Immediately
The campsite is engulfed
The blast and thermal radiation char everything within a radius of hundreds of metres, gutting the great majority of the main camping area while it is full of holidaymakers.
11 July onward
The toll mounts
Around 200 people are killed at or near the scene; others die over the following days and weeks of their burns. The commonly cited death toll settles near 215, with some sources giving 217. About 200 more are severely burned.
1978
Regulation tightens
In the aftermath, Spain prohibits the daytime transit of vehicles carrying dangerous cargo through populated areas, pushing such movements to night.
1982
The criminal verdict
Four ENPETROL employees and two from Cisternas Reunidas are convicted of criminal negligence and sentenced to one to four years; the companies pay compensation.
After 1982
Sentences eased on appeal
Four of the convicted are released after appealing; the prison sentences are suspended or reduced.

The Refinery, the Tanker, and the Coast Road

The propylene began its journey at the ENPETROL refinery at La Pobla de Mafumet, north of Tarragona, where it was loaded into a Pegaso tractor hauling a Fruehauf pressure-tank trailer. The trailer carried a rated capacity of 19.35 tonnes of liquefied gas — a limit set not arbitrarily but to preserve a margin of empty space, or ullage, above the liquid. Liquefied gases expand sharply with temperature, and the ullage is what absorbs that expansion. Fill the tank too full and a warm day alone can drive the internal pressure past what the steel was designed to hold.

On 11 July the tank held roughly 23.5 tonnes — almost four tonnes beyond the limit, leaving the vessel close to hydraulically full. The inquiry found this was no one-off error of a single careless loader: the refinery lacked both a meter to measure the gas dispensed and an automatic cut-off, loading was governed by habit rather than instrumentation, and overloading had become routine. The driver, a 20-year veteran, had received no formal hazardous-materials training; the company had relied on his years behind the wheel.

The route compounded the exposure. The tanker travelled south on the N-340, the coastal national road that threaded directly past campsites, villages, and beaches, rather than keeping to a separated motorway. A pressure vessel loaded past its margin was thus driven, in high summer, alongside one of the most densely occupied stretches of holiday coast in Spain. By the time it reached Los Alfaques it had covered about 102 kilometres, the propylene warming as it went.

A Fireball Over the Campsite

What failed at km 159 was the tank itself. The combination of overload, a warming load, and a vessel weakened by microscopic stress cracks — traced to earlier corrosion from improperly pressurised anhydrous ammonia — drove the steel past its limit and it split open. There was no emergency pressure-relief valve to vent the rising pressure; such valves had once been required but were not mandatory under the regulations in force in 1978, and this tank had none. With nowhere to bleed off, the vessel ruptured.

The physics that followed is the defining hazard of liquefied-gas transport. When such a tank fails, the liquid — held above its atmospheric boiling point only by the tank's pressure — flashes almost instantaneously into a vast volume of vapour; mixed with air and ignited, it burns as a single enormous fireball: a boiling-liquid expanding-vapour explosion, or BLEVE. At Los Alfaques the fireball reached temperatures well above 1,000 °C and radiated heat lethal across hundreds of metres of open ground. It struck a campsite crowded with families at lunchtime in mid-July.

The human cost is recorded here without elaboration: roughly 215 people died, with some authoritative sources — including the French government's industrial-accident database and a later Spanish scientific review — giving 217, a figure that appears to include the driver and deaths from injuries in the days afterward. About 178 of the dead were French holidaymakers; some 200 more were severely burned. The discrepancy between 215 and 217 reflects the difficulty of fixing a precise toll where deaths from burns continued over time; both figures appear in the documented record.

The Judicial Inquiry and the 1982 Trial

Spain in 1978 had no standing road-transport investigation board on the model of the American NTSB or the later French BEA-TT. The reconstruction was therefore the work of a judicial investigation, conducted to establish criminal liability, whose technical findings fed the trial that opened in 1982. The finding must be labelled precisely: this was a court-directed inquiry and a criminal verdict, not a transport-safety board's published probable cause.

The inquiry's technical conclusions were unambiguous. The tank had been overloaded by some four tonnes, leaving insufficient ullage; it lacked the pressure-relief valve that might have vented the rising pressure; and its steel bore stress cracks from prior corrosive cargo. The organisational findings were equally damning: the absence of metering and automatic shut-off at the refinery, the documented routine of overloading across dozens of loads, and the dispatch of an untrained driver with a hazardous load along a populated coastal road.

In 1982, four employees of ENPETROL, the state-owned refinery operator that loaded the tanker, and two employees of Cisternas Reunidas S.A., the company that owned and operated it, were convicted of criminal negligence and sentenced to terms of between one and four years' imprisonment. The verdict was subsequently softened: four of the convicted were released after appealing, and the prison sentences were suspended or reduced. The two companies together paid compensation equivalent to roughly €13.23 million (in unindexed terms) to the survivors and the bereaved.

The Five Factors

01
Overload erases the safety margin
A liquefied-gas tank is rated below its physical capacity precisely so that warming liquid has room to expand. Loading nearly four tonnes over the limit left the vessel almost hydraulically full and removed that margin, so that ordinary summer warming could drive the pressure past the steel's design strength. The rated capacity is the safety system; exceeding it disarms it.
02
The missing relief valve
A pressure-relief valve exists to vent rising pressure before a tank fails catastrophically. This trailer had none, and in 1978 the rules no longer required one. A protective device that has been deregulated out of existence cannot save anyone; the regression from a stricter to a laxer standard was a direct contributor to the rupture.
03
A tank weakened by its own history
Microscopic stress cracks from earlier corrosion by improperly pressurised anhydrous ammonia had degraded the vessel before propylene was ever loaded. Pressure tanks accumulate hidden damage across their service lives and cargoes; without inspection regimes that detect such cracking, a tank that looks sound can be operating with a fraction of its assumed strength.
04
Routine, not accident
The inquiry found dozens of overloaded tanks had left the refinery in the preceding months, with no meter and no automatic cut-off to stop them. The disaster was the predictable tail of a normalised practice, not a freak departure from a safe routine. Where unsafe practice is systematic and uninstrumented, a catastrophe is a matter of time, not of chance.
05
Hazardous loads through holiday crowds
A pressure vessel loaded past its margin was driven, in mid-July, along the populated coastal N-340 directly beside a full campsite. Routing decisions that send dangerous-goods vehicles through dense civilian areas convert a tank failure into a mass-casualty event. The hazard of the cargo and the exposure of the route multiply each other.

Aftermath

The legal reckoning closed in the early 1980s with criminal convictions of refinery and operator personnel and substantial compensation from the two companies, though the easing of the sentences on appeal left many of the bereaved without the sense that the punishment matched the scale of the loss. No transport-safety board issued a formal probable cause in the modern sense; the authoritative account of the cause is the judicial inquiry that underpinned the trial.

The disaster's most durable consequence was regulatory. Spain moved to restrict the movement of dangerous-goods vehicles, prohibiting their daytime transit through populated areas and pushing such loads to the night, when fewer people were in harm's way. More broadly, Los Alfaques entered the international engineering and safety literature as a textbook BLEVE — a case study, alongside the contemporaneous understanding of liquefied-gas hazards, in why pressure tanks must carry relief protection, why ullage limits are inviolable, and why hazardous cargoes must be kept away from crowds. It is frequently cited as a turning point in the safety regulation of chemical road transport in Spain and beyond.

Lessons

  1. Treat the rated capacity of a liquefied-gas tank as an absolute limit, not a target — the ullage margin is the device that prevents thermal overpressure, and overloading silently disarms it.
  2. Never let a safety fitting be deregulated away without replacing its function; a pressure-relief valve that the rules no longer require is a protection the next failure will not have.
  3. Inspect pressure vessels for cumulative damage across their full service history and cargo mix; corrosion and stress cracking from a previous load can fatally weaken a tank that appears sound.
  4. Instrument the loading process — meter the volume and fit automatic cut-offs — so that unsafe practice cannot become routine; a catastrophe born of habit is a system failure, not an individual lapse.
  5. Route hazardous-goods vehicles away from dense civilian areas and time their movements to minimise exposure; the consequence of a tank failure is set as much by who is nearby as by what fails.

References