Air France Flight 447

Air France
Industry	Airline
Founded	October 7, 1933; 93 years ago
Headquarters	Paris, France
Products	Passenger air transport
Website	www.airfrance.com

Air France Flight 447 was a planned transatlantic passenger service operating between Rio de Janeiro, Brazil, and Paris Charles de Gaulle Airport, France. On 1 June 2009, conflicting airspeed data combined with communication errors led the flight crew to unintentionally stall the Airbus A330. Unable to regain control, the aircraft plunged into the central Atlantic Ocean at 02:14 UTC, resulting in the loss of all 228 individuals aboard.

Within five days, the Brazilian Navy recovered significant debris and two bodies; however, France's Bureau of Enquiry and Analysis for Civil Aviation Safety (BEA) encountered setbacks as the aircraft's flight recorders were not retrieved from the seabed until May 2011, nearly two years post-accident.

The BEA's conclusive report, published on 5 July 2012, attributed the incident to brief airspeed anomalies—most likely caused by ice obstructing the pitot tubes—that led to autopilot disengagement. The pilots' incorrect handling then induced an aerodynamic stall which they failed to remedy. This disaster remains the deadliest in Air France’s history and the most severe involving an Airbus A330.

Aircraft

The aircraft involved was a four-year-old Airbus A330-203, bearing registration F-GZCP, delivered to Air France in April 2005. It was equipped with two General Electric CF6-80E1A3 engines, each producing up to 68,530 lbf of thrust, enabling cruising speeds between Mach 0.82 and 0.86 at an altitude of 35,000 feet and a maximum range of 12,500 km. The plane had undergone a major maintenance overhaul on 16 April 2009 and had logged approximately 18,870 flight hours at the time of the accident. Notably, it was Air France’s final Airbus A330 delivery.

Passengers and crew

Onboard were 216 passengers accompanied by 3 flight crew and 9 cabin attendants distributed across two service classes. Passenger composition included 126 males, 82 females, and 8 children (one being an infant). The majority held French, Brazilian, or German citizenships and were traveling for business or leisure.

The cockpit team comprised:

Captain Marc Dubois (58), serving as pilot in command with a total of 10,988 flight hours (6,258 as captain), including approximately 1,700 hours on the Airbus A330. He joined Air France in 1988 from Air Inter and had completed sixteen South America sector rotations since 2007.
First Officer David Robert (37), acting as cruise relief co-pilot with 6,547 flying hours (4,479 on the A330). A graduate of École nationale de l'aviation civile, he joined Air France in 1998 and had completed thirty-nine South America rotations since 2002.
First Officer Pierre-Cédric Bonin (32), designated pilot flying with a total of 2,936 flight hours (807 on the A330). He began his career with Air France in 2003 and had completed five South America rotations since 2008. His spouse was also among the passengers.

The cabin staff consisted of nine individuals whose experience ranged from two up to twenty-eight years. Among them, eleven crew members were French nationals while one was Brazilian.

Following the tragedy, Air France established a crisis management center at Charles de Gaulle Airport to assist families of those onboard. Many passengers were connecting to international destinations; consequently, Air France reached out to nearly two thousand relatives and acquaintances after the crash. On 20 June 2009, initial compensation payments amounting to about €17,500 per victim’s family were announced.

Final count of passenger nationalities
Nationality	Passengers	Crew	Total
Argentina	1	0	1
Austria	1	0	1
Belgium	1	0	1
Brazil	58	1	59
Canada	1	0	1
China	9	0	9
Croatia	1	0	1
Denmark	1	0	1
Estonia	1	0	1
France	61	11	72
Gabon	1	0	1
Germany	26	0	26
Hungary	4	0	4
Iceland	1	0	1
Ireland	3	0	3
Italy	9	0	9
Lebanon	3	0	3
Morocco	3	0	3
Netherlands	1	0	1
Norway	3	0	3
Philippines	1	0	1
Poland	2	0	2
Romania	1	0	1
Russia	1	0	1
Slovakia	3	0	3
South Africa	1	0	1
South Korea	1	0	1
Spain	2	0	2
Sweden	1 (2)	0	1 (2)
Switzerland	6	0	6
Turkey	1	0	1
United Kingdom	5	0	5
United States	2	0	2
Total	216	12	228

Notes:

Nationality information as provided by Air France in June 2009.
Some passengers held multiple citizenships complicating nationality classification.
Parentheses denote passengers assigned to countries different from their official citizenship.

Distinguished passengers

Prince Pedro Luiz of Orléans-Braganza, positioned third in the succession line to the defunct Brazilian throne and grandnephew of Grand Duke Jean of Luxembourg. Holding dual citizenship in Brazil and Belgium, he was traveling back to Luxembourg after visiting family in Rio de Janeiro.
Giambattista Lenzi, serving as a member of the Regional Council of Trentino-Alto Adige/Südtirol.
Silvio Barbato, composer and former conductor affiliated with the Cláudio Santoro National Theater in Brasília and the Rio de Janeiro Municipal Theater; en route to professional commitments in Kyiv.
Octavio Augusto Ceva Antunes, professor specializing in chemistry and pharmaceutics at the Federal University of Rio de Janeiro.
Fatma Ceren Necipoğlu, Turkish classical harpist and academic from Anadolu University in Eskişehir; returning home through Paris following her participation in the Rio Harp Festival.
Izabela Maria Furtado Kestler, German studies professor at the Federal University of Rio de Janeiro.
Pablo Dreyfus, Argentine activist campaigning against illegal arms trafficking and drug trade.

Accident

On 31 May 2009 at 19:29 Brazilian Standard Time (22:29 UTC), the aircraft took off from Rio de Janeiro–Galeão International Airport, scheduled to arrive at Paris-Charles de Gaulle Airport at 11:04 Central European Summer Time (09:03 UTC) the next day, with an anticipated flight duration of 10 hours and 34 minutes. Radio contact was lost approximately at 01:35 UTC, which was three hours and six minutes after departure. The final communication indicated passing waypoint INTOL near Brazil’s northeastern coastline. At 01:49 UTC, the plane exited Brazilian Atlantic radar coverage, entering an area without communication signals.

Although the Airbus A330 typically requires only two pilots, Air France’s regulation limiting pilot duty to ten hours necessitated a third pilot on this thirteen-hour Rio-Paris flight. The crew consisted of a captain and two first officers, enabling rest periods within the A330’s designated crew rest area behind the cockpit.

Initially, Captain Dubois assigned First Officer Robert to rest while planning to take his break later. At 01:55 UTC, Dubois woke Robert and exited the cockpit at 02:01:46 UTC. By 02:06 UTC, turbulence warnings were issued; soon afterward, the aircraft encountered icing conditions that caused ice crystals to clog the pitot tubes responsible for measuring airspeed. Pilot Bonin responded by reducing speed from Mach 0.82 to Mach 0.80 and activating engine anti-icing systems.

At 02:10:05 UTC, likely due to iced pitot tubes, the autopilot disengaged, causing flight control to shift from "normal law" to "alternate law 2 (ALT2)." The autothrust system also disengaged moments later. Bonin assumed manual control; turbulence induced rolling motions which he countered with excessive corrections owing to increased sensitivity in ALT2 mode. Subsequently, he abruptly pulled back on his side-stick, unnecessarily raising the aircraft’s nose. The stall warning briefly activated twice as indicated airspeed plummeted from 274 knots to 52 knots. The plane climbed above its cruising altitude of 35,000 feet at vertical rates nearing 7,000 feet per minute.

At 02:10:34 UTC, left-side instruments showed erratic airspeed data caused by pitot tube icing lasting slightly over one minute. Although airspeed indications recovered afterward, Bonin maintained nose-up inputs; the horizontal stabilizer adjusted from 3° to 13° nose-up and held this position until impact.

By 02:11:10 UTC, at approximately 38,000 feet altitude with engines set at full thrust (TOGA mode), the angle of attack reached 16°. As descent commenced, this angle rapidly increased toward 30°, resulting in loss of wing lift and triggering an aerodynamic stall. Stall protection features were disabled under ALT2 flight control law.

Bonin voiced loss of control as First Officer Robert took over by pushing his side-stick forward attempting stall recovery; simultaneously Bonin pulled back on his own side-stick, cancelling out control inputs and activating a "dual input" alert.

Captain Dubois returned to the cockpit at 02:11:40 UTC; by then angle of attack had escalated to 40°, altitude decreased near 35,000 feet with engines operating near maximum thrust. Stall warnings ceased as airspeed readings became unreliable due to excessive angle of attack. Although the aircraft’s nose remained above the horizon, it was descending steeply.

Around 02:12 UTC, Bonin slightly reduced pitch; airspeed indicators normalized temporarily while stall warnings resumed intermittently until flight termination. Angle of attack stayed above 35°, and engines operated predominantly at full power throughout descent. Despite efforts reported by Robert to regain control, Bonin persisted with maximum nose-up commands despite Captain Dubois’ cautionary signals.

The aircraft descended below altitudes suitable for stall recovery; ground proximity alerts sounded "sink rate" and "pull up" warnings. Without notifying colleagues, Bonin fully pulled back his side-stick and expressed disbelief about their situation.

Flight data recorders ceased recording at 02:14:28 UTC following a descent lasting more than three minutes from stall altitude. Ground speed registered at 107 knots while descent rate exceeded 10,900 feet per minute with pitch around 16° nose-up. The airplane executed a turn exceeding 180° during its stalled descent.

Impact occurred when the aircraft struck the ocean surface belly-first at an approximate combined speed of 152 knots vertically and horizontally. This resulted in complete destruction and fatal injuries to all 228 passengers and crew aboard due to extreme forces upon impact.

Automated communications

Air France's A330 fleet employs the Aircraft Communications Addressing and Reporting System (ACARS) to relay information via VHF or satellite links. During its disappearance, F-GZCP was utilizing satellite communication due to its location over the mid-Atlantic. ACARS automatically transmitted position updates roughly every 10 minutes, with the last report at 02:10:34 providing specific coordinates .

In the moments leading up to the aircraft's loss of contact, its centralized maintenance system dispatched a series of ACARS alerts to ground personnel between 02:10 and 02:15 UTC. These comprised five failure notifications and nineteen warnings. Among these was a malfunction in the pitot-static system, essential for accurate airspeed measurement, which pilots recognized as severely compromising aircraft handling. Concurrently, twelve warnings indicated disengagements of autopilot and autothrust systems, malfunctions in the traffic collision avoidance system, and a transition from "normal law" to "alternate law" flight control mode.

Between 02:11 and 02:14 UTC, additional alerts reported faults in the air data inertial reference units and the integrated standby instrument system (ISIS). At 02:12 UTC, a "NAV ADR DISAGREE" warning highlighted inconsistencies among the three independent air data systems after one was excluded due to fault detection. By 02:13 UTC, a failure alert was issued for the flight management guidance and envelope computer. The final messages at 02:14 UTC included an air data reference warning alongside a cabin vertical speed advisory, suggesting a rapid descent.

Summary of 24 ACARS messages

Time	Code	Description
22:45	FAILURE LAV CONF	Toilet system malfunction
02:10	WARNING AUTO FLT AP OFF	Autopilot disengaged
02:10	WARNING AUTO FLT	Unspecified warning
02:10	WARNING F/CTL ALTN LAW	Fly-by-wire control switched from normal ("Normal Law") to alternative mode ("Alternate Law"), deactivating multiple flight safety protections
02:10	WARNING FLAG ON CAPT PFD	False airspeed alert on captain’s Primary Flight Display (PFD)
02:10	WARNING FLAG ON F/O PFD	False airspeed alert on first officer’s PFD
02:10	WARNING AUTO FLT A/THR OFF	Autothrust system disconnected
02:10	WARNING NAV TCAS FAULT	Traffic Collision Avoidance System (TCAS) failure and shutdown
02:10	WARNING F/CTL RUD TRV LIM FAULT	Rudder travel limiter disabled, allowing full rudder deflection range
02:10	WARNING MAINTENANCE STATUS	Unspecified status alert
02:10	FAILURE EFCS2 1	Electronic Flight Control System fault detected
02:10	FAILURE EFCS1 X2	Additional Electronic Flight Control System failures reported
02:11	WARNING FLAG ON CAPT PFD	Recurring false airspeed alert on captain’s PFD
02:11	WARNING FLAG ON F/O PFD	Recurring false airspeed alert on first officer’s PFD
02:12	WARNING NAV ADR DISAGREE	Discrepancies detected in Air Data Reference (ADR) readings affecting speed and attitude; potential false alarm
02:12	FAILURE ISIS 1	Failure in Integrated Standby Instrument System (ISIS) artificial horizon
02:12	FAILURE IR2 1,EFCS1X,IR1,IR3	Faults recorded in inertial reference units (IR1, IR2, IR3) along with Fly-by-wire system errors
02:13	WARNING F/CTL PRIM 1 FAULT	Primary flight control computer error leading to deactivation due to inconsistent data
02:13	WARNING F/CTL SEC 1 FAULT	Secondary flight control computer malfunction affecting spoilers and elevators
02:14	WARNING MAINTENANCE STATUS	Unspecified status alert
02:14	FAILURE AFS	Automatic Flight System shutdown
02:14	WARNING ADVISORY	'Alert indicating possible rapid descent or cabin depressurization; readings may be influenced by instrument faults'

Weather conditions

The mid-Atlantic region experienced weather consistent with the season, characterized by an extensive band of thunderstorms along the Intertropical Convergence Zone (ITCZ). Meteorological data indicated the presence of a mesoscale convective system approximately above the Atlantic Ocean near the trajectory of Flight 447 before it vanished. The aircraft encountered only mild turbulence during its final hour.

Flight crews operating commercial aircraft regularly navigate storms of this nature in this area. With automated systems managing the plane, the pilots concentrated on tracking their progress through the ITCZ using on-board weather radar to steer clear of intense turbulence. It is notable that a dozen other flights had recently traversed routes similar to Flight 447.

Surface search

Flight 447 was anticipated to enter Senegalese airspace around 02:20 (UTC) on 1 June and Cape Verdean airspace by 03:45. After losing contact with air traffic control in both regions shortly after 04:00, Senegalese controllers attempted to reach the aircraft and also enlisted another Air France flight (AF459) to establish communication; both efforts were unsuccessful.

An aerial search operation commenced on both sides of the Atlantic, spearheaded by Brazilian Air Force planes from Fernando de Noronha and French reconnaissance aircraft stationed in Dakar, Senegal. Support was provided by a Spanish Casa 235 maritime patrol plane and a U.S. Navy Lockheed Martin P-3 Orion maritime patrol aircraft.

By early afternoon on 1 June, officials from Air France and the French government presumed no survivors remained. An Air France representative told L'Express that there was "no hope for survivors," a sentiment echoed by French President Nicolas Sarkozy.

At 15:20 (UTC) on 2 June, a Brazilian Air Force Embraer R-99A located debris and oil slicks roughly northeast of Fernando de Noronha Island near the Saint Peter and Saint Paul Archipelago. The recovered items included an aircraft seat, an orange buoy, a barrel, and electrical components. Brazilian Defence Minister Nelson Jobim confirmed that the debris likely belonged to Flight 447. Brazilian Vice-President José Alencar declared three days of official mourning.

On 2 June, French Navy vessels Ventôse and the helicopter carrier Mistral proceeded toward the crash location, accompanied by the research vessel Pourquoi Pas?, which was equipped with minisubmarines capable of descending to depths of , suitable for the ocean's depth near the site.

By 3 June, the Brazilian Navy patrol boat Grajaú arrived at the debris field. Five Brazilian naval ships were deployed in total: frigates Constituição and Bosísio, corvette Caboclo, and replenishment oiler Almirante Gastão Motta.

On 6 June, five days post-disappearance, two male bodies—the first recovered—were brought aboard Caboclo, along with a seat, a backpack containing a computer and vaccination card, and a briefcase holding a boarding pass for Flight 447. Early media reports suggested that the bodies were unclothed, implying high-altitude disintegration; however, investigators later dismissed this claim. The evidence confirmed that all individuals onboard perished in the crash.

On 7 June, search teams retrieved the Airbus's vertical stabilizer—the first significant piece of wreckage—marking a poignant moment in the investigation.

Search efforts intensified during the following week with over 1,100 Brazilian military personnel involved (850 Navy members and 250 Air Force personnel). Fifteen aircraft, including two helicopters, supported operations. The Embraer R-99 accumulated more than 100 flight hours scanning electronically over an area exceeding , while other aircraft conducted visual surveys directing naval units.

By 16 June, fifty bodies had been recovered from an extensive ocean area. These remains were transported by frigates Constituição and Bosísio to Fernando de Noronha before being flown to Recife for identification. Pathologists utilized dental records and fingerprints to identify all recovered victims, including the captain. By the end of search operations on 26 June, a total of 640 debris items had been catalogued in the search database.

The BEA detailed this recovery timeline within its initial interim report.

Underwater search

On 5 June 2009, the French nuclear-powered submarine Émeraude was deployed to aid in locating the missing flight recorders ("black boxes") at significant ocean depths. Utilizing sonar technology, the submarine sought to detect ultrasonic signals emitted by the recorders' underwater locator beacons, scanning an area of roughly 13 square miles daily. Émeraude operated in conjunction with the mini-submarine Nautile, which was capable of conducting seabed missions, supported by two U.S. underwater acoustic devices able to detect signals from depths up to 20,000 feet.

After completion of body recovery efforts, the focus shifted to retrieving the Cockpit Voice Recorder (CVR) and Flight Data Recorder (FDR), both positioned in the aircraft’s rear lower section. BEA director Paul-Louis Arslanian expressed doubts about success due to extreme depths reaching 3000 meters and challenging underwater topography. Although France lacked prior experience recovering recorders from such profound depths, a precedent existed with South African Airways Flight 295’s CVR, recovered from 4900 meters. The recorders were equipped with water-activated pingers featuring a 30-day battery life to facilitate detection.

France requested two towed pinger locator hydrophones from the U.S. Navy. The nuclear submarine and two French-chartered vessels, Fairmount Expedition and Fairmount Glacier, towing U.S.-provided listening equipment, conducted searches within an 80-kilometer radius of the aircraft’s last known location. By mid-July 2009, no black boxes had been located; diminishing battery life reduced chances of detection over time. A French research vessel resumed searching in late July using a towed sonar array but concluded operations on 20 August without success inside a 75-kilometer radius.

The third phase of searching (April–May 2010) involved the ships Anne Candies and Seabed Worker. The former dragged a U.S. Navy sonar array while the latter deployed three autonomous underwater vehicles (REMUS AUVs). Funded jointly by Air France and Airbus, this phase covered about 6300 square kilometers primarily north and northwest of the last known position. International oceanographers defined the search area based on debris distribution and ocean current data. A smaller southwestern zone was also investigated following re-examination of sonar data from Émeraude. Despite nearly complete coverage by May 2010, no wreckage was discovered.

2011 search and recovery

In July 2010, Metron, Inc., a U.S.-based search consultancy, was contracted to develop a probability map to refine search efforts using traditional Bayesian search techniques informed by flight data and previous search outcomes. Phase four targeted the aircraft’s final probable location as identified by Metron.

Within one week of recommencing the search in April 2011, a team led by the Woods Hole Oceanographic Institution employed full ocean depth autonomous underwater vehicles (AUVs) owned by the Waitt Institute and detected an extensive debris field from flight AF447 utilizing sidescan sonar. Debris and human remains were located at approximately depth on a relatively flat, silty seabed—contradicting earlier assumptions of rugged underwater terrain. Recovered components included engines, wing fragments, and landing gear.

The debris field extended roughly and was situated just north of previously retrieved wreckage, suggesting the aircraft struck water largely intact. The French Ecology and Transportation Minister announced plans to recover bodies and wreckage for examination in France. To retrieve flight recorders, France chartered the vessel Île de Sein, supported by Phoenix International’s Remora 6000 remotely operated vehicle (ROV) and skilled U.S. Navy recovery experts.

Arriving at the site on 26 April, during its initial dive the Remora 6000 located the flight data recorder’s chassis but not its memory module. On 1 May, the memory unit was recovered, followed by retrieval of the cockpit voice recorder on 2 May. Both recorders were transported under judicial seal first to Cayenne and subsequently to BEA offices near Paris for data extraction and analysis. Additionally, one engine and the avionics bay housing onboard computers were recovered.

By 15 May, data from both recorders had been completely downloaded and examined; results were published in July’s third interim report. The entire data retrieval process was recorded.

Between 5 May and 3 June 2011, a total of 104 bodies were recovered from the crash site wreckage, bringing total identified remains including earlier finds at sea to 154. The search ended with 74 bodies remaining unaccounted for.

Investigation and Safety Enhancements

French authorities initiated two separate inquiries following the incident. On 5 June 2009, a criminal investigation into manslaughter was opened, overseen by Investigating Magistrate Sylvie Zimmerman of the Paris High Court. The National Gendarmerie carried out the investigation through its aerial transport division and forensic laboratory. Concurrently, the DGSE reviewed passenger manifests to identify any potential terrorist connections. Preliminary manslaughter charges were brought against Air France and Airbus in March 2011; these charges were later dismissed in 2019 and 2011, respectively.

In parallel, a technical investigation focusing on flight safety improvements was launched. Acting on behalf of the manufacturing state (France) under ICAO Annex 13 guidelines, the BEA led the inquiry. Brazil’s CENIPA, Germany’s BFU, the UK’s AAIB, and the U.S. NTSB participated actively, with additional observers from nations whose citizens were aboard.

On 5 June 2009, the BEA issued a warning against drawing hasty conclusions, stating that only two facts were firmly established: the presence of intense convective weather near the flight corridor and conflicting airspeed data from pitot tubes during the final moments.

The BEA’s interim report released on 2 July 2009 compiled verified information and analyzed recovered aircraft components. The evidence suggested that the plane likely impacted the ocean surface in a normal flight attitude but at a steep descent rate. There was no indication of an in-flight fire, explosion, or structural failure. At that stage, post mortem reports had not been reviewed by investigators.

On 16 May 2011, Le Figaro reported that initial analysis of flight data recorder (FDR) information led BEA investigators to exclude aircraft malfunction as a cause; however, the BEA dismissed this as unconfirmed speculation and confirmed that investigations were ongoing with no interim report expected before summer. The lead investigator later clarified that no significant mechanical faults had been identified thus far, although minor anomalies could not be ruled out.

Airspeed Discrepancies

Prior to disappearance, multiple ACARS messages transmitted by the aircraft indicated inconsistencies in indicated airspeed measurements. A BEA representative explained that "the pilots received unclear airspeed information." On 4 June 2009, Airbus released an Accident Information Telex reminding operators of procedures to follow when confronted with unreliable airspeed data. French Transport Minister Dominique Bussereau highlighted that inaccurate speed readings might result in either aerodynamic stall or structural damage caused by exceeding critical speeds near the speed of sound.

Pitot Tubes

Between May 2008 and March 2009, Air France’s A330/A340 fleet experienced nine incidents involving temporary loss of airspeed readings at cruise altitudes between FL310 and FL380. After Flight 447’s crash, Air France uncovered six additional unreported events recorded only in maintenance documentation. These issues were predominantly noted on A320 aircraft during 2007. Pending Airbus guidance, Air France postponed pitot tube replacements on their A330/A340 fleet but increased inspection frequency.

The Airbus A330 model introduced in 1994 was equipped with Goodrich pitot tubes (part number 0851GR). In 2001, an Airworthiness Directive mandated replacing these with either updated Goodrich units (0851HL) or Thales tubes (C16195AA). Air France chose Thales probes for their fleet. By September 2007, Airbus recommended switching from Thales C16195AA tubes to model C16195BA to mitigate water ingress problems. As this recommendation was not compulsory, Air France initially implemented it on their A320 fleet before applying it to A330/340 aircraft following failures detected from May 2008 onward.

Following consultations with Airbus, Air France expedited their pitot tube replacement program in 2009 after testing indicated improved reliability with newer probes. By mid-June 2009, all pitot tubes on Air France’s A330s had been replaced. In July 2009, Airbus advised operators to substitute Thales pitot tubes with Goodrich models on both A330 and A340 aircraft.

On 12 August 2009, Airbus issued mandatory service bulletins requiring installation of two Goodrich 0851HL pitot tubes plus one Thales C16195BA tube—or alternatively three Goodrich probes—on all A330 and A340 aircraft, effectively phasing out Thales C16195AA units. These requirements were incorporated into regulations by both the European Aviation Safety Agency and the Federal Aviation Administration, with compliance mandated by January 2010. The FAA referenced reports linking airspeed inconsistencies to Thales probes operating under high-altitude icing conditions and noted their lower durability compared to Goodrich counterparts.

On 20 December 2010, Airbus alerted approximately one hundred operators of A330 and A340-200/300 aircraft about ongoing pitot tube concerns and recommended pilots refrain from re-engaging autopilot following airspeed indicator failures. The BEA’s safety recommendations stressed equipping pitot probes with heating elements to prevent icing-related malfunctions and urged installation of visual warnings for heating system failures.

Flight Data Recorder Insights

On 27 May 2011, the BEA provided an update to its investigation incorporating flight data recorder (FDR) findings, which confirmed that the aircraft entered the ocean intact rather than breaking apart mid-flight. The FDR data indicated the descent resulted from the crew raising the aircraft’s nose and reducing speed until an aerodynamic stall occurred, ruling out mechanical failure or adverse weather as causes.

The autopilot disengaged because of conflicting airspeed readings; however, the reason why the pilots sustained a nose-up attitude during the stall remains unresolved, despite standard recovery procedures calling for lowering the nose. Multiple sensors consistently recorded pitch data, showing no evidence of malfunction. The Airbus A330’s design typically prevents control inputs that could induce a stall, suggesting that pilots may have been unaware that a stall was possible under alternate law modes activated by airspeed sensor failures. The BEA characterized this event as a "sustained stall," distinct from the deep stall phenomenon common in T-tail aircraft.

In October 2011, a cockpit voice recorder (CVR) transcript was leaked and published in Jean Pierre Otelli’s Erreurs de Pilotage. Both Air France and the BEA criticized this unauthorized publication as sensationalist and disrespectful to those affected. Subsequently, the BEA issued an official CVR transcript with extraneous content removed.

Highlights from leaked CVR transcript
Time	Speaker	French	English translation
02:02:00	Captain exits cockpit for rest period, leaving less experienced co-pilots in command.
02:03:44	Bonin (Right seat)	La convergence inter tropicale… voilà, là on est dedans...	Inter-tropical convergence zone... we’re right inside it.
02:05:55	Robert (Left seat)	Oui, on va les appeler derrière...	We should notify cabin crew.
02:06:04	Bonin	Dans deux minutes, on devrait attaquer une zone où ça devrait bouger un peu plus.	In two minutes, we’ll enter an area with increased turbulence.
02:06:50	Bonin	Va pour les anti-ice.	Turning on anti-icing system.
02:10:06	Bonin	'J’ai les commandes.	I have control.
02:10:07	Robert	'Qu’est-ce que c’est que ça?	What is this?
02:10:15	Bonin	'On n’a pas une bonne annonce de vitesse.	We don’t have reliable airspeed readings.
02:10:27	Robert	'Faites attention à ta vitesse.	Watch your speed.
02:10:37	Bonin	'C’est parti, on redescend.	We’re starting to descend.
02:10:41	Bonin	'On est en "climb."	'We’re climbing.'
02:11:03	Bonin	'Je suis en TOGA, hein?	'I’m in Takeoff/Go-around mode.'
02:11:21	Robert	'On a pourtant les moteurs! Qu’est-ce qui se passe?	'Engines are running! What’s happening?'
02:11:32	Bonin	'J’ai plus le contrôle de l’avion!	'I’ve lost control of the aircraft!'
02:11:43	Captain	'Eh… Qu’est-ce que vous foutez?	'Hey… what are you doing?'
02:11:45	Bonin	'On perd le contrôle de l’avion!	'We’re losing control!'
02:12:14	Robert	'Qu’est-ce qu’il faut faire?	'What should we do?'
02:12:15	Captain	'Alors, là, je ne sais pas!	'I don’t know!'
02:13:40	Robert	'Remonte... remonte...'	'Climb... climb...'

The transcript exposes critical moments where pilots contended with unreliable airspeed information and conflicting control inputs. Crew resource management deteriorated amid confusion over stall recovery techniques and contradictory control actions. Even after sensor data normalized, pilots did not lower the nose to recover from the stall. This episode highlights deficiencies in pilot training and aircraft system design when confronted with sensor failures at cruising altitude.

Third Interim Report

On 29 July 2011, the BEA issued its third interim report addressing safety concerns related to the accident, accompanied by summaries and recommendations.

Key findings included:

Pilots did not adhere to procedures for unreliable airspeed scenarios.
The pilot flying pulled back on the sidestick, increasing angle of attack and causing rapid climb.
The crew appeared unaware that the aircraft had reached its maximum certified altitude.
Pilots failed to verbalize critical parameters such as vertical speed and altitude.
The stall warning sounded continuously for 54 seconds without pilot reaction.
Pilots seemingly did not identify the stall despite aerodynamic buffet cues.
The stall warning system disables when angle of attack sensors provide invalid data, which occurs when airspeed falls below a threshold.
This led to intermittent activation of stall warnings as pilots manipulated controls, likely causing confusion.
Despite recognizing rapid altitude loss, pilots struggled to discern reliable instruments amid conflicting data.

The BEA established a human factors working group to examine crew behavior during the flight’s final moments.

Air France remarked that misleading intermittent stall warnings severely compromised crew situational awareness.

Final Report

Released on 5 July 2012, the BEA’s final report reaffirmed earlier conclusions and proposed safety enhancements. It outlined a chain of events culminating in the crash:

Temporary discrepancies in airspeed readings—probably caused by pitot tube icing—triggered autopilot disconnection and transition to alternate law control.
The flight crew made inappropriate control inputs destabilizing flight trajectory.
Procedures for loss of valid airspeed indications were not followed.
Flight path deviations were identified and corrected too late.
Insufficient comprehension of stall onset among crew members.
Failure to detect and recover from aerodynamic stall conditions.

Contributing factors included:

Communication gaps among manufacturers, operators, crews, and regulators hindered recognition of recurrent non-compliance with loss-of-airspeed protocols and inadequate training regarding pitot probe icing.
Lack of practical high-altitude manual flying training under abnormal speed conditions.
Poor task distribution between co-pilots aggravated by ineffective management of startle response following autopilot disengagement.
Cockpit displays lacked clear indications of airspeed inconsistencies detected by flight computers.
Crew response to stall warnings was impaired by confusing audio alerts, transient signals due to invalid sensor data, absence of visual stall cues after losing normal speed references, misinterpretation of buffeting sensations, misleading flight director commands, and difficulty understanding alternate law protections which do not prevent angle-of-attack exceedance.

Independent Evaluations

Prior to and following publication of the BEA’s final report, numerous independent assessments and expert commentaries emerged analyzing accident causation.

Accident Significance

In May 2011, Wil S. Hylton of The New York Times remarked that this crash was unprecedented in modern aviation because no distress calls or radar traces were detected. He emphasized that since the A330 is regarded as one of the safest commercial aircraft types, Flight 447’s sudden disappearance was especially notable. Hylton suggested it could be viewed as a cautionary example regarding automated flight systems or likened metaphorically to an aviation "Titanic."

Dr. Guy Gratton from Brunel University described it as an unparalleled tragedy commanding worldwide investigative attention comparable to Lockerbie. He underscored that major passenger jets do not simply fall from cruising altitude without cause.

Angle-of-Attack Display

Captain Chesley "Sully" Sullenberger advocated for equipping cockpits with angle-of-attack (AoA) indicators to assist pilots in upset recovery. However, aviation author Bill Palmer questioned their utility in AF447’s case since pilots disregarded key pitch attitudes and stall warnings.

The BEA recommended that regulatory bodies such as EASA and FAA consider mandating AoA indicators on flight instrument panels. In 2014, FAA eased approval processes for AoA indicators in general aviation but maintained existing requirements for commercial operations.

Human Factors & Automation Interaction

A December 2011 Popular Mechanics article analyzing CVR transcripts identified co-pilot errors under alternate law control as primary causes alongside breakdowns in crew resource management.

The BEA report highlighted Airbus’s human-machine interface as a contributing factor; pilot pitch-up inputs appeared influenced by misleading flight director cues and altimeter discrepancies. Investigators noted insufficient cockpit indications regarding airspeed inconsistencies caused by blocked pitot tubes and recommended explicit alerts for such failures. The lack of AoA information complicated stall recognition.

Der Spiegel detailed how multiple simultaneous system failures overwhelmed pilots who had less than three minutes to diagnose complex failures amid poor visibility and heavy buffeting. The report warned similar accidents could recur without improvements.

William Langewiesche explained in Vanity Fair that extreme angles of attack caused stall warnings to cease temporarily before reactivating when nose-down input occurred—potentially reinforcing incorrect pitch-up responses exacerbating the stall condition.

Side-Stick Control Characteristics

In April 2012, journalist Nick Ross compared Airbus side-stick controls with Boeing yokes, noting that Airbus side-sticks provide minimal tactile or visual feedback between pilots. A synthetic voice issues a 'Dual Input' alert if both pilots apply controls simultaneously; however, this warning has low priority and can be masked by other alarms. Ross suggested this design may explain why fatal nose-up inputs by one pilot were not overridden by his counterpart.

In July 2012, Captain Sullenberger observed Airbus cockpits lack mechanical linkage between side-sticks; thus one pilot may be unaware when another continues inputting commands. During AF447’s accident sequence, the left-seat pilot believed he controlled the aircraft while right-seat inputs prevailed.

The BEA final report acknowledged difficulty in monitoring side-stick inputs from opposite seats—especially under night instrument conditions—but did not attribute this factor directly to the accident nor recommend changes to side-stick design.

Similar issues were noted during Indonesia AirAsia Flight 8501's crash.

Pilot Fatigue

Adequate rest is vital for long-haul operations. Although no conclusive evidence linked fatigue to Flight 447’s crew performance per BEA findings, CVR recordings include Captain Dubois mentioning only one hour of sleep prior to departure—suggesting potential rest insufficiency. Data regarding co-pilots’ rest patterns during their stopover in Rio de Janeiro were unavailable.

Aftermath

Following this tragedy, Air France changed its Rio de Janeiro–Paris flight number from AF447 to AF445; as of December 2023 it operates under AF485. While initially continuing Airbus A330 service on this route post-accident, Air France later switched to Boeing 777-300ER aircraft. Starting January 2024, Air France began phasing out its A330 fleet in favor of more fuel-efficient Airbus A350-900 models. The first A330 retired was registration F-GZCL on 31 May 2024 after an incident involving severe cumulonimbus winds at N'Djamena International Airport ended its 21 years in service. Complete retirement of A330s is projected by 2030.

Six months after the crash—on 30 November 2009—Air France Flight 445 (an A330-203) declared a mayday due to intense turbulence near the same region and timeframe as Flight 447's disappearance. Unable to immediately obtain ATC clearance for descent, pilots used mayday calls standardly to alert other traffic about altitude deviation. After approximately half an hour navigating turbulence safely resumed normal operations before landing in Paris after six hours forty minutes.

Incidents Involving Erroneous Airspeed Indications

Several events involving faulty airspeed readings have affected Airbus A330/A340 models predominantly linked to pitot probe malfunctions. For example:

An Air France A340-300 (F-GLZL) en route Tokyo–Paris at 31,000 feet (9,400 m) experienced autopilot disengagement due to erroneous speed data; investigation revealed blocked drainage holes in all three pitot probes combined with adverse weather conditions.
Another Air France A340-300 (F-GLZN) flying Paris–New York encountered turbulence resulting in autoflight system losses and repeated unreliable airspeed warnings leading to stalls.
TAM Airlines A330-200 operating Miami–Rio de Janeiro on 21 May 2009 suffered sudden outside air temperature drops resulting in loss of air data systems (ADIRS), autopilot disengagements including autothrust failure; manual recovery using backup instruments followed descent of 1,000 metres (3,300 ft) altitude.
Northwest Airlines experienced similar A330 incidents investigated by NTSB concluding existing manuals sufficed for safe operations under such conditions.

Post-AF447 crash analyses prompted Airbus operators like Delta Air Lines (which absorbed Northwest) to review flight records identifying multiple pitot tube failures traversing the Intertropical Convergence Zone—the same area where AF447 crashed.

Legal Proceedings

From 2011 onward investigations into manslaughter charges targeted both Air France and Airbus concerning the crash. In 2019 prosecutors recommended dropping charges against Airbus while pursuing manslaughter and negligence accusations against Air France due to insufficient pilot training addressing known technical issues. Charges against Airbus were dismissed July 2019; those against Air France dropped September citing insufficient evidence. However, in 2021 Paris prosecutors sought trials for both companies; prosecution was confirmed by April with Airbus immediately appealing.

Trial commenced on 10 October 2022 charging both entities with involuntary manslaughter; both pleaded not guilty. On 7 December prosecutors announced they would not seek convictions recommending acquittal—a stance provoking anger among victims’ families. On 17 April 2023 both Air France and Airbus were acquitted; French prosecutors subsequently filed appeals against verdicts.

In Popular Culture

The one-hour documentary Lost: The Mystery of Flight 447, produced by Darlow Smithson in 2010 for Nova and BBC explored early independent hypotheses without black box data using ACARS messages analysis alongside weather conditions and debris patterns suggesting supercooled water obstructed pitot tubes disabling most automatic systems leading to information overload and auto-thrust issues preventing proper power management during stalled flight envelope recovery attempts.

On 16 September 2012 UK Channel 4 broadcast Fatal Flight 447: Chaos in the Cockpit, featuring black box audio with detailed reenactments produced by Minnow Films; Australian 60 Minutes aired similar coverage in 2014.

The aviation disaster series Mayday (also known as Air Crash Investigation) presented a dedicated episode titled "Air France 447: Vanished" airing April-May 2013 across UK & US markets.

American aviator-author William Langewiesche published "Should Airplanes Be Flying Themselves?" in Vanity Fair October 2014 examining automation themes post-crash.

The podcast 99% Invisible featured an episode on June 23rd, 2015 titled "Children of the Magenta (Automation Paradox Part One)," initiating a two-part series addressing automation challenges highlighted by AF447 events.

In November 2015 MIT professor David Mindell discussed Flight 447 on an EconTalk podcast tied to his book Our Robots, Ourselves, characterizing it as a "failed handoff" between autopilot systems and human pilots.

Rooster Teeth's podcast Black Box Down covered Flight AF447 extensively in its episode "Stalling at Thirty-Eight Thousand Feet Over The Atlantic" released July 30th, 2020.

On September 9th, 2021 Season Three Episode One of Science Channel’s documentary series Deadly Engineering, titled "Catastrophes in the Sky," featured coverage of this accident.

Notes

Works cited

Official documentation (English)

BEA (France), comprehensive interim and final reports on June 1st, 2009 Airbus A330-203 accident involving Air France Flight AF447 Rio de Janeiro–Paris route published between years 2009–2012 by Bureau d’Enquêtes et d’Analyses pour la sécurité de l’aviation civile (BEA). These reports include CVR transcripts, FDR timelines along with thorough causal analyses.

Official documentation (French) – authoritative versions providing detailed technical assessments and procedural insights into AF447 incident investigations conducted by BEA.

Additional references

Otelli Jean-Pierre – Erreurs de pilotage : Tome 5, Altipresse (2011).
Rapoport Roger – The Rio/Paris Crash : Air France 447, Lexographic Press (2011).
Malmquist Shem & Rapoport Roger – Angle of Attack : Air France 447 et l’avenir de la sécurité aérienne, Lexographic Press (2017).
Palmer Bill – Understanding Air France 447, William Palmer Publishing (2013).

External links

BEA report dated 29 July 2011 (Summary of the third interim report): English version, French version