Operating with Reduced Redundancy: Engineering Analysis of Bleed Air System Failure
On February 3, 2026, an EasyJet Airbus A320-200 (registration G-EZWK) operating flight U23211 from Edinburgh to Fuerteventura suffered a rapid loss of cabin pressure at FL390, approximately 70 nautical miles north of Santiago de Compostela, Spain. The aircraft had dispatched with a known defect permitted under the Minimum Equipment List (MEL): the Bleed Air System #1 on the left CFM56 engine was deactivated. When an overheat and leak warning occurred on the remaining Bleed Air System #2 during cruise, protective logic isolated the last active engine pneumatic source. The flight crew donned oxygen masks, initiated an immediate emergency descent to FL080, started the Auxiliary Power Unit (APU) after reaching a suitable density altitude to restore system capabilities, and safely diverted to Porto, Portugal.
BASELINE: OPERATING WITHOUT REMAINING REDUNDANCY MARGIN
The aircraft was released at the departure airport under the provisions of the Minimum Equipment List (MEL), with the left bleed air system (Engine #1) deactivated and isolated. The A320 architecture allows this operation because the remaining right system and the APU provide sufficient capacity. However, this state transitions the aircraft from operating with redundancy to operating without remaining redundancy margin.
SECONDARY ISOLATION: PNEUMATIC CUTOFF IN CRUISE
At FL390, a leak detection loop triggered an alarm on the remaining right bleed air system (#2). To prevent thermal damage to airframe structures or wiring harnesses from hot bleed air (up to 250°C), protective logic or crew procedures isolated the right duct branch, leaving total available engine bleed air at zero.
DEPRESSURIZATION AND CONTROLLED EMERGENCY DESCENT
Deprived of pneumatic input from both engines, the cabin altitude began climbing rapidly. Because time of useful consciousness at FL390 without supplemental oxygen is measured in seconds, the crew donned masks and executed a rapid emergency descent to FL080 (8,000 ft), where ambient atmospheric pressure supports human respiration.
APU ENGAGEMENT WITHIN OPERATIONAL ENVELOPE
After reaching an altitude envelope where APU bleed compressor performance becomes effective, the crew started the Auxiliary Power Unit to restore pneumatic and electrical support in accordance with aircraft procedures. The flight completed a safe diversion to Porto without further incident.
Investigation Findings
- The deactivation of Bleed Air System #1 was known prior to departure and met all dispatch criteria under the Minimum Equipment List (MEL).
- A thermal leak in Bleed Air System #2 forced the automatic isolation of the last active engine bleed source at FL390.
- The simultaneous loss of both engine bleed sources caused a complete loss of cabin pressurization capability.
- The execution of the emergency descent and subsequent APU startup strictly followed Standard Operating Procedures (SOP).
- No injuries were reported, and the aircraft structure remained undamaged.
Engineering Lessons
- The Minimum Equipment List (MEL) does not assume secondary failures are impossible; it assumes they remain possible and ensures the aircraft retains a safe, predefined response sequence.
- Dispatching under MEL items consumes the safety buffer, functionally transforming multi-channel redundant architectures into single-point-of-failure states.
- System safety design must ensure that when secondary failures occur, the result is a managed, predictable system degradation.
- Modern aircraft are designed with the expectation that components will eventually fail; the engineering challenge is ensuring the aircraft transitions into another controllable state rather than an uncontrollable one.
Official Sources
- Comisión de Investigación de Accidentes e Incidentes de Aviación Civil (CIAIAC) – Preliminary Report
- Airbus A320 Flight Crew Operating Manual (FCOM) – Bleed Air & Pressurization Systems
- EasyJet Engineering & Maintenance Dispatch Logs