← back to the reports
TT-013 Open road · Herborn, Hesse, Germany 1987

Herborn tanker disaster — A Brakeless Fuel Tanker Sent Down a Hill Into a Town

mechanicaltanker-truck1980s
Killed
6 (5 direct)
Vehicle
Fuel road tanker
Setting
Open road
Status
Operator

Summary

On the evening of 7 July 1987, a five-axle articulated fuel tanker lost its brakes on the downhill approach to Herborn, a small town in the German state of Hesse, ran out of control into the town centre, overturned, and ignited; escaping fuel poured into the sewer system and set off a chain of underground explosions. Six people died and 38 were injured; twelve houses burned and seven were demolished. Five of the dead were killed directly by the flames or beneath the rubble; a sixth, a 64-year-old woman, suffered a fatal heart attack from the shock — which is why the toll is sometimes given as five and sometimes as six.

The tanker, a Mercedes-Benz 1635 S, was carrying about 28,000 litres of petrol and roughly 6,000 litres of diesel as it travelled east on the Bundesstraße 255 from the Koblenz direction. On the long descent toward Herborn its overheated, worn service brakes failed. The driver intended to take the slip road onto the BAB 45 motorway but could not slow enough to make the turn and rolled on downhill into the town. Crucially, the truck's Daimler-Benz electro-pneumatic EPS transmission would not let him shift down to use the engine as a brake. The tanker tipped over in a sharp right-hand bend at about 20:43 and struck buildings at the Westerwaldstraße–Hauptstraße junction, near an ice-cream parlour. Some three minutes later the spilled fuel ignited in a flame tens of metres high; petrol that had run into the drains then deflagrated underground, hurling manhole covers as far as 700 metres away.

The cause was examined through criminal proceedings and a court-commissioned expert assessment — a Gutachten by Professor Bert Breuer of the Technische Hochschule Darmstadt — rather than by a transport-safety board, which is the correct way to characterise the finding. The court at Limburg an der Lahn established that a pressure loss in the air-brake system was the technical trigger, that the brakes were overheated and worn, and that the vehicle had been knowingly put into service in a no-longer-roadworthy condition. Breuer's assessment held that a driver with a conventional manual gearbox could have used engine braking to compensate for the brake failure, and that the accident might not have happened at all in a truck without the EPS transmission.

The verdict came on 17 January 1990 after an eleven-month trial. The haulage-company owner, who had dispatched the vehicle, was sentenced to two and a half years' imprisonment; the driver received eighteen months on probation and a fine of 6,000 Deutsche Mark. Two other defendants — a dispatcher and a workshop manager — were acquitted. Because the decisive failure was the organisation's decision to operate an unroadworthy vehicle, the finding is recorded here as Operator.

Timeline

7 July 1987, evening
Loaded and dispatched
A five-axle Mercedes-Benz 1635 S articulated tanker, carrying roughly 28,000 litres of petrol and about 6,000 litres of diesel, runs east on the B255 from the Koblenz direction toward Herborn.
Approaching Herborn
The brakes fade on the descent
On the long downhill approach, several kilometres before the town, the truck's overheated and worn service brakes lose pressure and fail.
Same descent
The gearbox will not help
The Daimler-Benz electro-pneumatic EPS transmission prevents the driver from shifting down, denying him the engine braking that might have held his speed.
Moments later
The exit is missed
Unable to slow enough, the driver cannot take the planned slip road onto the BAB 45 motorway and rolls on, gathering speed, into the town.
~20:43
Overturn and impact
In a sharp right-hand bend at the Westerwaldstraße–Hauptstraße junction, the overloaded, over-fast tanker tips over and strikes buildings near an ice-cream parlour, splitting open.
~20:46
Ignition
About three minutes after the spill, the fuel ignites in a flame tens of metres high, engulfing the buildings at the junction.
~20:47
The sewers explode
Petrol that has run into the drainage system deflagrates underground in a series of blasts, throwing manhole covers as far as 700 metres from the crash.
Through the night
Toll and damage
Six people die — five from the fire or collapse, one of a heart attack brought on by shock — and 38 are injured. Twelve houses burn; seven are demolished.
18 February 1989
Trial opens
Four defendants — the company owner, the driver, a dispatcher, and a workshop manager — go on trial at the regional court in Limburg an der Lahn.
During trial
The expert assessment
Prof. Bert Breuer of TH Darmstadt presents a Gutachten: a manual gearbox would have allowed engine-braking compensation, and the EPS transmission was central to why the descent could not be controlled.
17 January 1990
The verdict
After eleven months, the court sentences the company owner to 2½ years' imprisonment and the driver to 18 months on probation plus a 6,000 DM fine; the dispatcher and the workshop manager are acquitted.

The Vehicle and the Descent

The tanker that came down on Herborn was a heavy five-axle articulated combination — a Mercedes-Benz 1635 S — loaded with about 34,000 litres of fuel in total: some 28,000 litres of petrol and around 6,000 litres of diesel. It was running the Bundesstraße 255 eastward, due to join the BAB 45 motorway at a slip road on the approach to Herborn.

Two facts about the vehicle, established later in court, made the descent unsurvivable. The first was the condition of the brakes: overheated and worn, the service-brake system lost pressure and failed on the long downhill grade. A heavily laden fuel tanker descending a gradient depends on its brakes to a degree that leaves no margin; once they faded, the truck accelerated under its own weight. The second was the transmission: the Daimler-Benz EPS, an early electro-pneumatic semi-automatic gearbox, would not permit a downshift on the runaway descent, so engine braking — the standard fallback when service brakes fail on a hill — was denied to the driver.

The combination was decisive. With no brakes and no way to use the engine to hold his speed, the driver could not slow enough to negotiate the slip road onto the motorway. He rolled past the exit and on, gaining speed, toward the town centre on a road never meant to receive a runaway tanker.

The Town Centre

Herborn's old centre is a dense fabric of close-built houses along narrow streets — a medieval townscape that, on this night, was acutely vulnerable. The B255 fed into it through a sharp right-hand bend at the Westerwaldstraße–Hauptstraße junction, a turn a controlled vehicle takes at walking pace; the runaway tanker reached it far too fast.

At about 20:43 the combination tipped over in the bend and slammed into the buildings at the junction, beside an ice-cream parlour that, on a warm July evening, would have drawn people out. The tank ruptured and tens of thousands of litres of fuel spilled across the street and ran into the lowest available channels — the drains and the sewer system beneath the town. For roughly three minutes the fuel spread, above ground and below, before it found ignition.

When it caught, the fire rose in a flame estimated at tens of metres high and engulfed the buildings at the junction. Then the sewers detonated: the petrol that had drained underground deflagrated in a series of explosions that flung manhole covers as far as 700 metres from the crash, carrying the disaster well beyond the impact site. Six people were killed — five directly by the fire or the collapsing buildings, and a sixth, a 64-year-old woman, by a heart attack triggered by the shock. Thirty-eight were injured; twelve houses burned and seven were destroyed, leaving dozens of residents homeless.

The Gutachten and the Court at Limburg

The cause was established not by a transport-safety board but through the criminal justice system, informed by a court-commissioned expert assessment — a German Gutachten. The key technical witness was Professor Bert Breuer, who held the chair in vehicle engineering at the Technische Hochschule Darmstadt and had taken part in the accident investigation. His assessment addressed the central question the defence had raised: could the driver have stopped the truck once the brakes failed?

Breuer's conclusion drew the line between mechanical fate and avoidable design. A driver with a conventional, manually shifted gearbox, he held, could have compensated for the loss of the wheel brakes by holding the lowest speed reached and using engine braking to manage the descent; with the EPS transmission, which would not allow the downshift, that recovery was unavailable. The accident, in his assessment, might not have happened in a truck with a conventional transmission. The defence offered alternative reconstructions; the court dismissed them, in its own phrase, as "Potemkin villages," and found that a pressure drop in the air-brake system was the technical cause.

The decisive finding, however, was organisational: the vehicle had been knowingly put into service in a condition that was no longer roadworthy — overheated and worn brakes on a heavy fuel tanker sent onto a route with a long descent. On 17 January 1990, after an eleven-month trial that had opened in February 1989, the court delivered its verdicts. The haulage-company owner, responsible for dispatching the vehicle, was sentenced to two and a half years' imprisonment; the driver received eighteen months on probation and a 6,000 Deutsche Mark fine. The two remaining defendants — a dispatcher and a workshop manager — were acquitted. The weight of responsibility fell on the company's decision to operate the truck at all.

The Five Factors

01
An unroadworthy vehicle, knowingly dispatched
The court's central finding was that the tanker was put into service with overheated, worn brakes — that the organisation knowingly operated a vehicle that was no longer roadworthy. The proximate failure happened on the hill, but the decision that made it possible was made in the yard. Operator responsibility for the mechanical fitness of a vehicle precedes and outweighs the driver's handling of its failure.
02
Brakes with no margin on a grade
A heavily laden fuel tanker descending a gradient places a sustained, severe demand on its service brakes; overheated and worn brakes have no reserve for it. The fade on the descent was the predictable result of dispatching marginal brakes onto a demanding route. Brake condition must be matched to the worst grade a vehicle will see, not to flat-road adequacy.
03
A transmission that blocked the last resort
When service brakes fail on a hill, engine braking via a low gear is the recognised fallback. The EPS electro-pneumatic transmission would not let the driver downshift, removing that option when it was most needed. Drive-system automation that can deny a driver's emergency input must be designed so that it never closes off the recovery action a runaway demands.
04
Fuel that follows the drains
Tens of thousands of litres of petrol spilled into a town centre ran into the sewer system and deflagrated underground, throwing manhole covers hundreds of metres and extending the disaster far beyond the crash site. A fuel spill in an urban area is not contained by the impact point; the drainage network becomes a distribution system for the hazard, and emergency planning must treat the sewers as part of the fire.
05
A dense town at the bottom of the hill
The B255 fed a runaway descent directly into a tight medieval street pattern through a sharp bend the tanker could not take. Route and geometry turned a brake failure into a town-centre catastrophe. Where a road carrying hazardous loads runs downhill into a populated core, the consequence of any loss of control is set by what lies at the bottom.

Aftermath

The legal proceedings closed in January 1990 with the conviction of the company owner and the driver and the acquittal of the dispatcher and workshop manager. The apportionment was telling: the heaviest sentence went not to the man behind the wheel but to the operator who had sent an unroadworthy vehicle onto the road, reflecting a finding that located the decisive fault in the organisation rather than in the descent.

For Herborn, the consequences were lasting — a town centre partly destroyed, families bereaved, dozens of residents burned out of their homes. The disaster has remained a fixture in German discussion of hazardous-goods transport and of the case for keeping heavy dangerous loads out of vulnerable town centres, cited in fire-service and transport-safety literature as a benchmark tanker catastrophe — an example of how brake fitness, drive-system design, urban routing, and the sewer network combine to determine whether a single failed vehicle becomes a town-scale fire.

Lessons

  1. Hold the operator, not only the driver, accountable for a vehicle's mechanical fitness; dispatching a tanker with worn, overheated brakes is the root decision behind a runaway, and it is made before the wheels turn.
  2. Match brake condition and capacity to the steepest grade on the route, with a real reserve; a fuel tanker on a long descent has no margin for fade.
  3. Never let drive-system automation foreclose a driver's emergency options; a transmission that blocks the downshift removes engine braking exactly when a brakeless descent makes it the last resort.
  4. Plan for spilled fuel to enter the drainage network; treat the sewers as part of the fire and the blast radius, not as containment, when hazardous loads pass through built-up areas.
  5. Keep heavy hazardous loads off routes that run downhill into dense town centres, or engineer arrestor and run-off provision; the geometry at the bottom of the hill decides the human cost of any loss of control.

References