Disaster 03 · Engineering disasters
The safety test that pushed a reactor past its limits
A delayed safety test, a reactor design with hidden weaknesses and operators who bypassed the rules combined to destroy reactor 4 at Chernobyl.
- Chernobyl Nuclear Power Plant
- Pripyat, Ukrainian SSR, Soviet Union
- 1986
- 3 min read
On this page
Before you readWhat would you do?
Your company's payroll system update was planned for Friday morning with the IT lead present. It slips to Friday night, when only a junior colleague is on duty and the backup job has been paused to save time. What should happen?
Pick an answer now. The file tells you whether you were right.
01The file in one minute
1A delayed test
A safety test on reactor 4 was put back about ten hours and run by an unprepared night shift.
2Hidden design flaws
The RBMK reactor sped up as water turned to steam, and its control rods could briefly raise power.
3Rules bypassed
Operators removed most control rods and safety systems were off. Pressing shutdown triggered a power surge.
4The lesson
Share a system's known weaknesses with the people running it, and never skip safety checks to finish faster.
02Timeline
25 April 1986
The planned test on reactor 4 is delayed because the grid still needs power.
26 April 1986, 1:23 am
Emergency shutdown triggers a power surge and explosions destroy the reactor.
27 April 1986
The town of Pripyat is evacuated.
1992
An IAEA review puts much more weight on the reactor's design flaws.
03What happened
In the early hours of 26 April 1986, the night shift at the Chernobyl plant in Soviet Ukraine was running a test on reactor 4. The aim was to check whether the spinning turbines could keep the cooling pumps running for a short time if the plant lost power.
The test had been delayed by about ten hours because the grid still needed the electricity, so it fell to a shift that had not prepared for it. The reactor's power dropped far lower than planned. To bring it back up, operators pulled out most of the control rods, beyond what the rules allowed, and several safety systems had been switched off for the test.
The reactor type, called RBMK, had a dangerous property at low power: as cooling water turned to steam, the reaction sped up. Its control rods also had a design flaw that could briefly increase power when they were first pushed in. When the operators pressed the emergency shutdown button at 1:23 am, power surged, and steam explosions tore the reactor open and set the graphite inside on fire.
Two plant workers died that night. Within a few months, 28 more workers and firefighters died of acute radiation sickness. The nearby town of Pripyat was evacuated the next day. Estimates of long-term deaths from radiation vary widely and are still debated.
04Why it happened
The first Soviet account blamed the operators. A later review by the International Atomic Energy Agency's safety group, published in 1992, put far more weight on the reactor's design and on a system that had not told operators about its known weaknesses.
The operators broke rules, but they did so inside a culture where meeting the plan came first and where nobody had explained how dangerous the reactor could be in the state they put it in. Hidden design risk and pressure to finish the job met in one night.
The idea behind this caseLesson: Review AI like a manager →
05Lessons for decisions
- Tell the people who run a system about its known weaknesses, especially the ones that show up only in unusual conditions.
- When a planned task is delayed and handed to a different team, check that they are ready before going ahead.
- Never switch off safety checks to get a test or a job done faster.
- When things drift far from the plan, stop and reassess instead of improvising toward the original goal.
07 — Sources
- INSAG-7: The Chernobyl Accident, Updating of INSAG-1 · International Atomic Energy Agency · 1992
- Chernobyl disaster · Wikipedia · 2026