← back to the reports
TT-002 Road tunnel · California, USA 1982

Caldecott Tunnel fire — A Drunk Driver Stalls a Bore, Seven Burn

Killed
7
Vehicle
Gasoline tank truck (Kenworth double tanker)
Setting
Road tunnel
Status
Driver

Summary

Just after midnight on 7 April 1982, seven people died in the third (westbound) bore of the Caldecott Tunnel on State Route 24 between Oakland and Orinda, California, when a chain-reaction collision ruptured a gasoline tank trailer and ignited a pool fire that turned the 3,256-foot bore into a flue. The National Transportation Safety Board investigated the accident as case DCA82AH005 and published its findings as Highway Accident Report NTSB/HAR-83/01 on 3 May 1983. Its probable cause was unambiguous: a sequence that began with an intoxicated driver stopped in a through lane.

The trigger vehicle was a Honda driven by Janice Arlene Ferris, a 34-year-old San Leandro bookkeeper whose blood-alcohol concentration was measured at 0.17 — more than twice California's then-legal threshold. Travelling westbound at roughly 12:12 a.m., she struck the tunnel's raised curbs, lost control, and stopped in the left through lane about one-third to halfway into the bore, an unlit obstacle in a fast, dark tube. A following Kenworth double tanker hauling 8,800 US gallons (about 33,000 litres) of gasoline for Shell, driven by Mervyn Lee Metzker, struck the stopped Honda. An empty AC Transit bus then overtook and struck the tanker's trailer, which overturned, split open, and spilled most of its load onto the roadway, where the gasoline pooled and ignited within seconds.

The NTSB found the cause in the human chain, not the hardware. Its probable cause was "a combination of events involving (1) the erratic driving by the intoxicated driver of a passenger vehicle which stopped in a through traffic lane creating a traffic obstacle; (2) the inattention of the truck driver causing his vehicle to strike the passenger vehicle; and (3) the bus driver's overtaking the truck too rapidly to enable him to avoid striking the passenger vehicle when it unexpectedly appeared in the path of his bus." The Board then separated cause from severity, attributing the death toll to the flammable cargo, the tanker damage that released it, and a tunnel with no monitoring, no variable message signs, and no way to talk to the people inside it.

Of the seven dead, several never left their vehicles. Ferris died of thermal burns, as did Metzker and the bus driver, John Dykes, who was ejected; two survivors were treated for smoke inhalation. The lasting legal consequence was regulatory: California subsequently barred gasoline tank trucks from the Caldecott Tunnel except during low-traffic early-morning hours.

Timeline

6–7 April 1982, late evening
A drinking driver on the road
Janice Arlene Ferris, 34, drives westbound toward the Caldecott Tunnel with a blood-alcohol concentration later measured at 0.17, more than twice the legal limit.
7 April 1982, ~12:12 a.m.
The Honda stalls in the bore
Roughly one-third to halfway into the 3,256-foot third (westbound) bore, the Honda strikes the raised curbs, loses control, and stops in the left through lane — an unlit obstruction.
Seconds later
The tanker strikes
A Kenworth double tanker carrying 8,800 US gallons of gasoline, driven by Mervyn Lee Metzker, overtakes too fast to stop and strikes the stationary Honda from behind.
Seconds later
The bus strikes the trailer
An empty AC Transit bus, driven by John Dykes, overtakes the truck and strikes the tank trailer; the trailer overturns and splits open.
Immediately
Gasoline pools and ignites
Most of the trailer's load spills onto the roadway, forms a pool, and ignites — most likely from crash sparks — flashing into a sustained pool fire.
First minutes
Fire and smoke fill the tube
The single bidirectional bore acts as a chimney; intense heat and dense smoke trap occupants. The bus, struck and driverless, runs on and hits a concrete support pier.
Early morning
Seven dead, two injured
Seven people are killed, several without leaving their vehicles; two survivors are hospitalized for smoke inhalation. Ferris, Metzker, and Dykes are among the dead.
7 April 1982
The bore is gutted
The fire destroys the tanker, the trailer, the Honda, the bus, and several other vehicles, and severely damages the tunnel lining before it is brought under control.
25 May 1983
Safety recommendations issued
The NTSB issues recommendations (H-83-010 through H-83-020) to transportation agencies on tunnel monitoring, signage, communications, and hazardous-cargo routing.
3 May 1983
The Board reports
The NTSB adopts Highway Accident Report NTSB/HAR-83/01, finding the probable cause in the impaired driver, the inattentive truck driver, and the bus driver's closing speed.
After 1983
Daytime tanker ban
California prohibits gasoline tank trucks from the Caldecott Tunnel except during low-traffic early-morning hours, separating the heaviest fire load from peak occupancy.

The Bore at Midnight

The Caldecott Tunnel's third bore, opened in 1964, carried State Route 24 traffic between Oakland and the Orinda side of the Berkeley Hills through a 3,256-foot tube. At the time of the accident the bore operated bidirectionally as traffic demand shifted through the day; in the small hours of 7 April it was running westbound, a single dark tube with raised curbs flanking the lanes and no physical buffer between a stopped vehicle and the traffic behind it.

It was, by 1982 standards, an instrument-poor tunnel: no automatic incident detection, no variable message signage to warn approaching drivers that the lane ahead was blocked, no traffic signals at the portals or within the bore to hold traffic back, and no communication system linking tunnel staff to the motorists inside. A vehicle that stopped in a through lane was therefore invisible to the system and to following traffic until headlights found it — and at highway speed, in a confined tube, that was often too late. The Caldecott's defenses against a stalled-vehicle obstruction were, in practice, the alertness of individual drivers.

That margin was the first thing the alcohol erased. Ferris's 0.17 BAC degraded exactly the judgment, lane discipline, and reaction the bore relied upon, and her stalled Honda became precisely the obstacle the tunnel had no means to detect, signal, or clear.

The Chain and the Pool

The NTSB reconstructed the collision as a three-link chain. Ferris's car, stopped in the left through lane, was the obstacle. Metzker's tanker, the second link, was travelling too fast and too inattentively to stop in the distance available once the Honda resolved out of the dark, and struck the car. The bus, the third link, was overtaking the truck at a closing speed that left its driver no room to avoid the suddenly revealed Honda, and struck the tank trailer, which overturned and ruptured.

From that point the cargo dictated the outcome. The trailer released most of its 8,800 gallons of gasoline onto the tunnel floor, where it ignited within seconds — most plausibly from sparks thrown off during the metal-on-metal collisions. A gasoline pool fire in a confined bore produces immediate, intense radiant heat and a dense, rising smoke layer, and the tunnel geometry channelled both. The driverless bus, its driver ejected, continued forward and struck a concrete support pier.

The Board drew the line between why the accident happened and why it killed seven people. The collision was a human-factors event — impairment, inattention, closing speed. The lethality was a cargo-and-infrastructure event: a large volume of motor fuel released into an enclosed space with no monitoring to catch the stoppage early, no signage to halt the traffic feeding into it, and no way to direct the trapped occupants toward escape.

What the Board Attributed and What It Faulted

The NTSB's probable-cause statement located the accident squarely in the conduct of three drivers, and it named the impaired driver first. But the Board's most consequential analysis was its explicit list of factors contributing to the severity. It found that the presence of the flammable cargo tank truck and trailer in the tunnel, and the damage to the overturned trailer that permitted the loss of that cargo and the fire, drove the toll. It then faulted the tunnel itself: the lack of adequate monitoring capabilities, the absence of variable message signs or traffic signals at the entrance and within the bore, and the lack of any communication system between tunnel personnel and tunnel occupants.

That structure — a human cause, an infrastructural amplifier — is what makes Caldecott a clean Driver finding without letting the operator off the diagnostic hook. The Board did not pretend the tunnel caused the crash; it documented that the tunnel had no means to detect the stalled car, to stop the traffic running into it, or to help the people the fire then trapped. From those findings flowed recommendations H-83-010 through H-83-020, addressed to highway and tunnel authorities and to the hazardous-materials sector, on incident detection, message signage, occupant communication, and the routing of flammable cargoes around vulnerable tunnels.

The Five Factors

01
Impairment as the initiating event
A blood-alcohol concentration of 0.17 degraded the lane-keeping, judgment, and reaction that produced a car stopped across a through lane. Driver impairment does not merely raise an individual's risk; in a confined high-speed environment it manufactures the static obstacle that everything downstream collides with. The first defense against a tunnel pile-up is keeping impaired drivers out of the bore.
02
The cargo, not the crash, set the death toll
A three-vehicle collision is survivable; 8,800 gallons of gasoline released into a sealed tube is not. The NTSB drew the line explicitly between cause and severity. Tunnel risk analysis must treat the flammable load actually passing through the bore as the dominant variable, because it converts an ordinary collision into a mass-casualty fire.
03
A tunnel that could not see the stoppage
With no automatic incident detection, the stalled Honda was invisible to the operator until traffic found it. Detection latency is the window in which a survivable stoppage becomes a collision. Confined high-speed infrastructure needs to sense a stopped vehicle in seconds, not rely on the next driver's headlights.
04
No way to hold the traffic back
The bore had no variable message signs or signals to stop approaching vehicles once the lane was blocked. Without a means to halt the feed of traffic into an obstruction, every following vehicle is a fresh collision and, with a tanker present, a fresh ignition risk. Active traffic control upstream of the hazard is a survivability system, not a convenience.
05
No line to the people inside
With no communication system between staff and occupants, motorists in the fire had no instruction toward escape, and several died where they sat. In an enclosed fire the difference between waiting and walking is the difference between dying and surviving; a tunnel that cannot speak to its occupants cannot save them.

Aftermath

Because the driver whose impairment began the chain died in the fire she set off, the Caldecott case produced no living criminal defendant; the durable consequence was regulatory rather than punitive. California moved the heaviest fire load out of the bore's busiest hours, prohibiting gasoline tank trucks from the Caldecott Tunnel except during low-traffic early-morning windows — a direct response to the NTSB's finding that the flammable cargo, not the collision, had made the accident lethal.

The Board's recommendations had a longer reach. NTSB/HAR-83/01 became a reference case in US tunnel-safety practice on incident detection, variable message signage, occupant communication, and hazardous-materials routing — the same deficiencies that, on a far larger scale, would define the European tunnel-fire disasters of the following two decades. The Caldecott bore was repaired and returned to service, and the tunnel was later expanded with a fourth bore in 2013, built to modern monitoring and ventilation standards the 1982 fire had helped justify.

Lessons

  1. Keep impaired drivers out of confined high-speed bores; the impairment does not just endanger one car, it creates the stationary obstacle a tunnel is least able to detect, signal around, or clear.
  2. Treat the flammable cargo actually transiting a tunnel as the controlling risk, and separate it in time or route from peak occupancy — the cargo, not the collision, writes the death toll.
  3. Give every high-speed tunnel automatic incident detection; the latency between a vehicle stopping and the system noticing is the window in which a stoppage becomes a fatal fire.
  4. Install active traffic control — signals and variable message signs — upstream of and within the bore, so traffic can be halted the instant a lane is blocked rather than fed into the obstruction.
  5. Build a working communication link to occupants; people trapped in an enclosed fire need an instruction to leave on foot, and a tunnel that cannot reach them cannot direct them to survive.

References