Air France Flight 447 was a scheduled international transatlantic passenger flight from Rio de Janeiro, Brazil, to Paris Charles de Gaulle Airport, France, that crashed into the mid-Atlantic Ocean on 1 June 2009, killing all 228 passengers and crew on board. The incident, which occurred on an Airbus A330, happened because inconsistent airspeed indications and resulting miscommunication between the pilots led to an unrecoverable stall. The Brazilian Navy recovered the first major wreckage and two bodies from the sea within five days of the crash. The aircraft's flight recorders were not recovered from the ocean floor until May 2011, nearly two years after the accident.
France's Bureau of Enquiry and Analysis for Civil Aviation Safety final report, released at a press conference on 5 July 2012, concluded that the aircraft suffered temporary inconsistencies between the airspeed measurements—likely resulting from ice crystals obstructing the aircraft's pitot tubes—which caused the autopilot to disconnect. The crew reacted incorrectly to this, causing the aircraft to enter an aerodynamic stall which the pilots failed to correct. The accident is the deadliest in the history of Air France, as well as the deadliest aviation accident involving the Airbus A330.
On 21 May 2026, Airbus and Air France were both found guilty of corporate manslaughter. Each company was sentenced to pay the maximum fine of €225,000 ($261,112).
Aircraft The aircraft involved was a four-year-old Airbus A330-203, with serial number 0660, registered as F-GZCP. It was delivered to the airline in April 2005. The aircraft was powered by two General Electric CF6-80E1A3 engines with a maximum thrust of (take-off/max continuous), p. 18 sec. 1.2.1 with a cruising speed of , at of altitude and a range of . The aircraft underwent a major overhaul on 16 April 2009, and at the time of the accident it had accumulated about 18,870 flying hours. It was the last Airbus A330 delivered to the airline.
Passengers and crew
+Final tally of passenger nationalities Nationality Passengers Crew Total Argentina 1 0 1 Austria 1 0 1 Belgium 1 0 1 Brazil 58 1 59 Canada 1 0 1 China 9 0 9 Croatia 1 0 1 Denmark 1 0 1 Estonia 1 0 1 France 61 11 72 Gabon 1 0 1 Germany 26 0 26 Hungary 4 0 4 Iceland 1 0 1 Ireland 3 0 3 Italy 9 0 9 Lebanon 3 0 3 Morocco 3 0 3 Netherlands 1 0 1 Norway 3 0 3 Philippines 1 0 1 Poland 2 0 2 Romania 1 0 1 Russia 1 0 1 Slovakia 3 0 3 South Africa 1 0 1 South Korea 1 0 1 Spain 2 0 2 Sweden 1 (2) 0 1 (2) Switzerland 6 0 6 Turkey 1 0 1 United Kingdom 5 0 5 United States 2 0 2 Total 216 12 228 Notes: Nationalities shown are as stated by Air France on 1 June 2009. Attributing nationality was complicated by the holding of multiple citizenship by several passengers. Passengers who had citizenship in one country but were attributed to another country by Air France are indicated with parentheses ().
The aircraft was carrying 216 passengers, 3 aircrew, and 9 cabin crew in two cabins of service. Among the 216 passengers were 126 men, 82 women and 8 children (including 1 infant).
There were three pilots on the flight: The pilot in command, 58-year-old Captain Marc Dubois (pilot not flying, PNF) had joined Air France in February 1988 from rival French domestic carrier Air Inter (which later merged into Air France), and had 10,988 flying hours, of which 6,258 were as captain, including 1,700 hours on the Airbus A330; he had carried out 16 rotations in the South America sector since arriving in the A330/A340 division in 2007. The cruise relief co-pilot in the left seat, 37-year-old First Officer David Robert (PNF) had joined Air France in July 1998 and had 6,547 flying hours, of which 4,479 hours were on the Airbus A330; he had carried out 39 rotations in the South America sector since arriving in the A330/A340 division in 2002. Robert had graduated from École nationale de l'aviation civile, one of the elite Grandes Écoles, and had transitioned from a pilot to a management job at the airline's operations center. He served as a pilot on the flight to maintain his flying credentials. The co-pilot in the right seat, 32-year-old First Officer Pierre-Cédric Bonin (pilot flying, PF) had joined Air France in October 2003 and had 2,936 flight hours, of which 807 hours were on the Airbus A330; he had carried out five rotations in the South America sector since arriving in the A330/A340 division in 2008. His wife Isabelle, a physics teacher, was also on board. There were 9 cabin crew members on the flight:
Senior Purser Anne Grimout (49), 25 years' service, Purser Françoise Sonnic (54), 28 years' service, and Purser Maryline Messaud (45), 20 years' service. Flight Attendants Laurence Desmots (44), 18 years' service, Stéphanie Schoumacker (38), 13 years' service, Sébastien Vedovati (33), 11 years' service, Clara Amado (31), 8 years' service, Carole Guillaumont (31), 5 years' service, and Lucas Gagliano (23), 2 years' service.
Of the 12 crew members (including aircrew and cabin crew), 11 were French and 1 was Brazilian.
The majority of passengers were French, Brazilian, or German citizens. The passengers included business and holiday travelers.
Air France established a crisis center at Terminal 2D for the 60 to 70 relatives and friends who arrived at Charles de Gaulle Airport to pick up arriving passengers, but many of the passengers on Flight 447 were connecting to other destinations worldwide. In the days that followed, Air France contacted close to 2,000 people who were related to, or friends of, the victims.
On 20 June 2009, Air France announced that each victim's family would be paid roughly €17,500 in initial compensation.
Notable passengers
Prince Pedro Luiz of Orléans-Braganza, third in succession to the abolished throne of Brazil and grandnephew of Grand Duke Jean of Luxembourg. He had dual Brazilian–Belgian citizenship. He was returning home to Luxembourg from a visit to his relatives in Rio de Janeiro. Giambattista Lenzi, member of the Regional Council of Trentino-Alto Adige. Silvio Barbato, composer and former conductor of the symphony orchestras of the Cláudio Santoro National Theater in Brasília and the Rio de Janeiro Municipal Theater; he was en route to Kyiv for engagements there. Octavio Augusto Ceva Antunes, professor of chemistry and pharmaceutics at the Federal University of Rio de Janeiro. Fatma Ceren Necipoğlu, Turkish classical harpist and academic of Anadolu University in Eskişehir; she was returning home via Paris after performing at the fourth Rio Harp Festival. Izabela Maria Furtado Kestler, professor of German studies at the Federal University of Rio de Janeiro. Pablo Dreyfus from Argentina, campaigner for controlling illegal arms and the illegal drugs trade.
Accident
The aircraft departed Rio de Janeiro–Galeão International Airport on 31 May 2009 at 19:29 Brazilian Standard Time (22:29 UTC), with a scheduled arrival at Paris-Charles de Gaulle Airport of 11:03 Central European Summer Time (09:03 UTC) the following day (estimated flight time of 10:34). Voice contact with the aircraft was lost around 01:35 UTC, 3 hours and 6 minutes after departure. The last message reported that the aircraft had passed waypoint INTOL (), located from Natal, on Brazil's northeastern coast. The aircraft left Brazilian Atlantic radar surveillance at 01:49 UTC, and entered a communication dead zone.
The Airbus A330 is designed to be flown by two pilots, but the 13-hour "duty time" (the total flight duration, as well as preflight and post flight duties) exceeded the 10 hours permitted before a pilot had to take a rest, as dictated by Air France's procedures. To comply with these procedures, Flight 447 was crewed by three pilots: a captain and two first officers.BEA first 2009 1.17.2.3 "Air France procedures" With three pilots on board, each pilot could take a break in the A330's crew rest compartment, located behind the cockpit.
In accordance with common practice, Captain Dubois sent First Officer Robert for the first rest period with the intention of taking the second break himself. At 01:55 UTC, he woke up First Officer Robert and said, "... he's going to take my place". After attending the briefing between the two co-pilots, the captain left the cockpit to rest at 02:01:46 UTC. At 02:06 UTC, the pilot warned the cabin crew that they were about to enter an area of turbulence. About two to three minutes later, the aircraft encountered icing conditions. The cockpit voice recorder (CVR) recorded sounds akin to hail or graupel on the outside of the aircraft and ice crystals began to accumulate in the pitot tubes, which measure airspeed. Bonin, the pilot flying, turned the aircraft slightly to the left and decreased its speed from Mach 0.82 to 0.80, which was the recommended speed to penetrate turbulence. The engine anti-ice system was also turned on.
At 02:10:05 UTC, the autopilot disengaged, most likely because the pitot tubes had iced over, and the aircraft transitioned from "normal law" to "alternate law 2 (ALT2)" due to the lack of reliable flight data. The engines' autothrust systems disengaged three seconds later. The autopilot disconnect warning was heard on the CVR.
Bonin took manual control of the aircraft. Without the autopilot, turbulence caused the aircraft to start to roll to the right, and Bonin reacted by deflecting his side-stick to the left. One consequence of the change to ALT2 was the removal of both the dampers to control inputs, as well as maximum limitations to the A330's safe pitch, yaw and bank angles. Due to this increase in the aircraft's sensitivity to roll, the pilot overcorrected. During the next 30 seconds, the aircraft rolled alternately left and right as he adjusted to the altered handling characteristics of the aircraft. At the same time, he abruptly pulled back on his side-stick, raising the nose. This action was unnecessary and excessive under the circumstances. The aircraft's stall warning briefly sounded twice because the angle of attack tolerance was exceeded, and the aircraft's indicated airspeed dropped sharply from . The aircraft's angle of attack increased, and the aircraft subsequently began to climb above its cruising altitude of 35,000 ft (FL350). During this ascent, the aircraft attained vertical speeds well in excess of the typical rate of climb for the Airbus A330, which usually ascends at rates no greater than 2,000 feet per minute (10 m/s; 37 km/h). The aircraft experienced a peak vertical speed close to , which occurred as Bonin brought the rolling movements under control.
At 02:10:34 UTC, after displaying incorrectly for half a minute, the left-side instruments recorded a sharp rise in airspeed to , as did the integrated standby instrument system (ISIS) 33 seconds later. The right-side instruments were not recorded by the flight data recorder. The icing event had lasted for just over a minute,Palmer 2013, p. 7 "02:11:07 [...] The last of the pitot icing had cleared and all three airspeed indications were then displaying correctly"Palmer 2013, p. 57 "The pitot icing lasted for about one minute and five seconds" yet Bonin continued to make nose-up inputs. The trimmable horizontal stabilizer (THS) moved from 3 to 13° nose-up in about one minute, and remained in the latter position until the end of the flight.
At 02:11:10 UTC, the aircraft had climbed to its maximum altitude around . At this point, the aircraft's angle of attack was 16°, and the engine thrust levers were in the fully forward takeoff/go-around (TOGA) detent. As the aircraft began to descend, the angle of attack rapidly increased toward 30°. A second consequence of the reconfiguration into ALT2 was that the stall protection no longer operated, whereas in normal law, the aircraft's flight-management computers would have acted to prevent such a high angle of attack. The wings lost lift and the aircraft began to stall.