XL Airways Germany Flight 888T

XL Airways Germany
Industry	Airline
Headquarters	Germany
Products	Air transportation

XL Airways Germany Flight 888T (GXL888T) was undertaking a certification flight for an Airbus A320 on 27 November 2008. The aircraft went down in the Mediterranean Sea approximately 7 km from Canet-en-Roussillon, along the French coastline close to the Spanish border, resulting in the deaths of all seven occupants. Investigations revealed that the accident was caused by inadequate maintenance that allowed ice to form in the angle-of-attack sensors, leading to their malfunction, combined with the crew performing a test at an unsafe low altitude.

Purpose of flight test

Following minor maintenance and repainting in Air New Zealand colors, the aircraft was on a test flight as part of its transition from XL Airways Germany, which had been leasing it from Air New Zealand. The journey began at Perpignan–Rivesaltes Airport, included a flight over the Bay of Biscay, and returned to Perpignan for a touch-and-go landing before continuing to Frankfurt Airport. From Frankfurt, it was planned to be ferried to Auckland, New Zealand.

Aircraft details

The aircraft involved was an Airbus A320-232 with registration D-AXLA and serial number 2500, manufactured in 2005. Its maiden flight occurred on 30 June 2005, and it was initially delivered to Air New Zealand's budget subsidiary Freedom Air as ZK-OJL. XL Airways Germany (formerly Star XL German Airlines) took possession on 25 May 2006. Before the accident, the plane had undergone overhaul work at Perpignan–Rivesaltes Airport and was set to be returned to Air New Zealand under its original registration ZK-OJL.

Occupants

There were seven individuals on board: two German pilots from XL Airways and five New Zealand nationals, including one pilot, three aircraft engineers, and one representative from the Civil Aviation Authority of New Zealand (CAA).

The captain, Norbert Käppel, aged 51, had been with XL Airways since 2006 and accumulated 12,709 flight hours in total (7,038 hours on the A320). He also held responsibilities as air and ground operations manager for the airline. The first officer, Theodor Ketzer, aged 58, joined in 2006 and logged 11,660 flight hours (5,529 on the A320), having withdrawn from a captain upgrade program in 2007.

Brian Horrell, a New Zealand pilot aged 52 with Air New Zealand since 1986 and an A320 captain since 2004, had logged 15,211 flight hours (2,078 on the A320). He occupied the cockpit jumpseat during this flight and did not speak German.

The engineering team consisted of Murray White (37), Michael Gyles (49), and Noel Marsh (35). The CAA official was Jeremy Cook (58).

Accident

Shortly after departing Perpignan–Rivesaltes Airport at 14:44 UTC, Flight 888T requested permission to enter controlled airspace to carry out test manoeuvres but was denied by air traffic control because they had submitted a general aviation flight plan rather than the required operational air traffic flight plan for test flights. After additional refusals, the crew decided to return to Perpignan but intended to complete as many tests as possible during the return leg.

At 15:33 UTC, clearance was sought to climb to 39,000 feet for testing of the auxiliary power unit (APU). Although controllers were hesitant due to their general aviation status, permission was granted. At that altitude, tests were performed on the APU as well as bank angle protections and overspeed warning systems. During descent, Bordeaux controllers strongly advised against using a general aviation flight plan for such operations.

As time became limited, Senior Air New Zealand Captain Brian Horrell raised concern about performing the low-speed stall test at its prescribed altitude of 14,000 feet; however Flight 888T was already descending through 12,000 feet. The German captain proposed delaying or omitting this test but received no response. Below 3,000 feet and clear of cloud cover, Captain Käppel requested guidance from Horrell on conducting the stall test.

Following instructions received, Captain Norbert Käppel reduced throttle settings to idle and raised the nose via the side-stick, decelerating until stall warnings activated. The aircraft experienced shaking and entered a steep left bank. Although full power was applied and control briefly regained, it was soon lost again as the aircraft entered a rapid climb. Unaware that the flight control system had reverted to direct law, which requires manual adjustment using both side-stick and trim wheel for pitch control, the pilots struggled to lower the nose despite multiple warnings likely obscured by stall alerts.

The aircraft reached an extreme nose-up attitude of 57 degrees combined with a severe left bank just under 4,000 feet altitude while airspeed dropped dangerously low to approximately 40 knots—insufficient for sustained flight. The plane ultimately impacted the Mediterranean Sea near Étang de Canet-Saint-Nazaire off Canet-en-Roussillon. All seven people aboard perished.

Recovery

Within hours of the accident, two bodies were retrieved, with additional remains discovered in the following weeks. The extensive fragmentation of the aircraft debris suggested a high-velocity collision. Authorities designated the crash location as a crime scene, initiating a manslaughter inquiry led by French officials.

Investigation

The cockpit voice recorder (CVR) was promptly located, followed shortly by the retrieval of the flight data recorder (FDR) and a third victim. Although the CVR sustained damage, experts believed data extraction was feasible. Initial efforts by French investigators to access the recorders proved unsuccessful; however, later data recovery was successfully conducted by Honeywell Aerospace in the United States.

Attention focused on the air data inertial reference unit (ADIRU), due to prior incidents involving Airbus A330 aircraft, notably Qantas Flight 72. The inquiry was overseen by the Bureau of Enquiry and Analysis for Civil Aviation Safety (BEA), with collaborative involvement from German, New Zealand, and U.S. authorities, alongside technical specialists from Airbus, International Aero Engines (IAE), XL Airways Germany, and Air New Zealand.

Preliminary conclusions pointed to loss of aircraft control caused by unauthorized test maneuvers performed by the flight crew during descent without securing necessary airspace clearance. The crew executed a low-speed test at an unsafe altitude, which triggered rapid deceleration and multiple stall alerts amid aggressive handling. Ultimately, the airplane crashed into the sea after failing to recover from a stall condition.

The BEA's definitive 2010 report identified improper maintenance as a critical element: unshielded angle of attack (AOA) sensors were exposed to water during fuselage washing prior to painting, violating Airbus’s mandatory protective protocols. Water intrusion resulted in sensor freezing during flight, disabling two out of three sensors and impairing the aircraft’s flight management system.

The primary cause was attributed to the crew conducting an improvised AOA warning test without awareness of sensor malfunctions, coupled with disregard for speed limitations that led to a stall. The flight computer disregarded the single accurate sensor input while accepting erroneous data from two malfunctioning sensors, generating incorrect stall-protection commands that exacerbated the situation. Additionally, pilots failed to manually recover due to incorrect stabilizer trim settings.

Five safety recommendations emerged from the investigation: improving planning and procedures for non-revenue flights; closing gaps in equipment certification processes; performing safety analyses on flight control reconfiguration alerts; and updating approach-to-stall training tailored for modern aircraft systems.

Dramatisation

This accident was dramatized in season 13 of the Canadian television series Mayday, featured in an episode titled "Imperfect Pitch".

External links

Bureau of Enquiry and Analysis for Civil Aviation Safety