San Bruno gas pipeline rupture and fire, 2010

What happened. At about 6:11 PM on September 9, 2010, a 30-inch segment of Pacific Gas and Electric Company’s (PG&E) Line 132 natural gas transmission pipeline ruptured in a residential neighborhood of San Bruno, California. The escaping gas ignited, killing eight people, injuring 58 and destroying 38 homes[1]. The rupture came during a pressure increase caused by electrical work at the terminal where the line begins, which gave the valve controllers a false low-pressure signal[1].

Why it matters. There was no attacker: this is an accident, held here as a calibration point for what a pipeline loss of containment can cost. The amounts PG&E paid, forwent or could not recover come to about $2.44 billion, most of it penalties and mandated safety work rather than repairs[2][3].

About this analysis. This analysis sets out what is known, stage by stage, and rests mainly on the National Transportation Safety Board (NTSB) investigation and on regulatory and company filings. It reflects the best available information as of October 22, 2026; new information could confirm, change or discredit parts of it.

Highlights

• Electrical work during a power supply replacement at PG&E’s Milpitas Terminal fed erratic voltages to pressure transmitters, and the controllers commanded the regulating valves fully open. Pressure leaving Milpitas peaked at 396 psig[1].
• The increase ruptured a pipe section with a seam-weld flaw dating from 1956. PG&E’s records described the pipe as seamless; it was seam-welded[1][4].
• The California Public Utilities Commission (CPUC) imposed $1.6 billion in 2015, and a federal jury convicted PG&E of six felony counts in 2016[5][6].
• PG&E’s third-party claims reached $558 million, plus $92 million of legal costs, against which it received $515 million of insurance[3].

Attack flow

• Updated: 2026-10-22
• Intent: Accidental [confirmed]
• Threat actors: Not applicable [not in path | Accidental event, no attacker]
• Access vector: Not applicable [not in path | No attacker]
• IT impact: Not in path [not in path | No IT compromise]
• OT targeting: Not applicable [not in path | No attacker]
• OT sophistication: Not applicable [not in path | No attacker]
• OT impact: Loss / Denial of Control [confirmed | Accidental, false signal opened valves]
• Perils: Loss of Containment [primary]; Fire [secondary]
• Financial losses: Health, Safety, Casualty [confirmed | $558M claims]; Cyber-Physical Incident Response [confirmed | $97.5M remedy]; Assets & Equipment [confirmed | $13.5M repair]; Cyber Incident Response [confirmed | $850M safety work]; Reputation Damage [implied]

What happened

Line 132 begins at PG&E’s Milpitas Terminal; the rupture was at mile point 39.28. On the afternoon of September 9, 2010, workers at Milpitas were doing electrical work as part of replacing an uninterruptible power supply. NTSB found that erratic voltages to pressure transmitters gave the regulating-valve controllers an erroneous low-pressure signal, and the controllers commanded the regulating valves fully open. By 5:22 PM the valves were fully open, more than 60 alarms came in within seconds, and pressure in the lines leaving Milpitas peaked at 396 psig[1].

At about 6:11 PM the pipe ruptured in San Bruno and the gas ignited. Eight people died. NTSB counts 10 serious and 48 minor injuries, and the Pipeline and Hazardous Materials Safety Administration (PHMSA) says 51 people needed in-patient hospital care. The fire destroyed 38 homes, damaged 70 more and damaged or destroyed 74 vehicles[1][7].

NTSB found two probable causes. PG&E’s inadequate quality assurance and quality control in 1956, during a relocation project, allowed the installation of a substandard, poorly welded pipe section with a visible seam-weld flaw that grew to a critical size. PG&E’s integrity management program then failed to detect and repair or remove it. The section was made of short pieces, or “pups,” 43 to 54 inches long, and seamless pipe was not made in diameters larger than 26 inches[1]. NTSB also named contributing causes, among them exemptions of existing pipelines from pressure testing, the CPUC’s failure to detect the program’s weaknesses, the lack of automatic or remote shutoff valves and PG&E’s slow isolation of the rupture[1]. PG&E later told the CPUC it had misclassified more than 300 miles of transmission lines[8].

Intent: accidental

NTSB investigated San Bruno as a safety accident, and no source documents an attacker, a cyberattack or any malicious act[1]. The chain began with poorly planned maintenance and ended at a defect that had been in the ground since 1956. The path on the map starts at Accidental.

This record sits among cyber incidents for a specific reason. It shows the scale of loss that a pipeline loss of containment can produce once pressure reaches a weak point, whatever sets the pressure rise in motion.

Threat actors: none

There was no threat actor. No source suggests one, and the criminal case against PG&E concerned its own conduct: five willful violations of the Pipeline Safety Act and one count of obstructing the NTSB investigation[6]. The stage is marked not in path, and no actor is highlighted on the map.

Access vector: not applicable

No one gained access to anything. The pressure increase came from electrical work during a power supply replacement at the Milpitas Terminal, carried out by PG&E’s own workers[1]. NTSB’s probable causes are a 1956 quality-control failure and an inadequate integrity management program, neither of which involves an outside party[1]. The stage is marked not in path.

IT impact: not in the path

No IT system was involved. The control-system element of the chain was a power problem at the terminal, not a network compromise: erratic voltages reached the pressure transmitters during electrical work[1]. NTSB examined the control-system failure as part of its safety investigation, not as a security incident, and no source describes forensic work, credential resets or compromise recovery. The stage is marked not in path.

OT targeting: not applicable

The control system did act on the process, but no one directed it to. The regulating-valve controllers responded to a false signal by opening the valves fully[1]. Without an attacker there is no targeting to classify, so this stage is marked not in path.

The lesson for cyber risk is in the mechanism. A false low-pressure reading was enough to send full pressure down a line toward a weak point, with no one choosing that outcome[1].

OT sophistication: not applicable

Sophistication describes an attacker’s technique, and there was none. The failure was one of design and work planning: electrical work near live pressure-control instrumentation, and controllers that drove valves fully open on an erroneous low-pressure signal[1]. Nothing in the control equipment was corrupted or replaced, according to the sources, so this stage is marked not in path.

OT impact: a false signal opened the valves

NTSB’s account of the control-system effect is detailed. During the power supply work, erratic voltages to pressure transmitters produced an erroneous low-pressure signal. The regulating-valve controllers commanded the valves fully open, which they were by 5:22 PM, and more than 60 alarms arrived within seconds. Pressure in the lines leaving Milpitas peaked at 396 psig[1].

The map shows this as Loss / Denial of Control, confirmed, with one qualification: it was a malfunction during maintenance, not an adversary’s action. NTSB also found that the lack of automatic or remote shutoff valves and PG&E’s slow isolation of the rupture contributed to the outcome[1].

Perils: loss of containment, then fire

The primary peril is loss of containment. The pipe ruptured at the defective seam weld, a section about 28 feet long was destroyed, and PG&E estimated that 47.6 million standard cubic feet of gas was released[1].

Fire is the secondary peril. The escaping gas ignited, and the fire destroyed 38 homes and damaged 70[1]. Rupture and release came first and fire second; no source describes a separate explosion beyond the ignition. The gas burned rather than lingering as a contaminant, and no environmental cleanup is documented.

A risk-based integrity program is only as good as the asset records it relies on.

Financial losses: what it cost

The figures are unusually well documented, because they come from regulators, a court and PG&E’s own filings. The largest is the CPUC’s 2015 Penalty Decision of $1.6 billion: a $300 million fine, a $400 million bill credit to gas customers, $850 million of gas transmission safety work PG&E may not recover from customers, and about $50 million for other remedies[2][5][9]. In 2017 the court imposed the statutory maximum $3 million fine, $3 million of spending to publicize the offenses, five years of probation with a monitor and 10,000 hours of community service[6].

PG&E’s third-party claims for injury, death and property damage reached $558 million, plus $92 million of legal costs[3]. The often-quoted $565 million is the same claims at an earlier date, not a second amount[10][11][12]. PG&E also contributed $70 million to the City of San Bruno, and in 2018 the CPUC adopted a $97.5 million remedy for improper communications with its decision-makers[13][14][15][16].

Loss evidence

• Confirmed: Loss of life (eight people); Bodily injury (58 injured); Third-party claims for injury, death and property damage; Third-party property damage (38 homes destroyed, 70 damaged); Contribution to the City of San Bruno (third-party and societal impact); Destroyed pipe section; Pipeline repair; Return-to-service pressure restrictions; Regulatory and criminal penalties; Ex parte regulatory remedy; Legally mandated pipeline safety work; Insurance recovery
• Reported amounts: $850M Gas transmission safety work PG&E may not recover, CPUC Penalty Decision, 2015[5]; $558M Cumulative third-party claims, according to PG&E[3]; $400M One-time bill credit to gas customers, CPUC Penalty Decision[5]; $300M Fine to the state General Fund, CPUC Penalty Decision[5]; $220M Property damage, “over $220 million” by PG&E’s estimate, according to PHMSA, inside the $558M[7]; $97.5M Ex parte remedy adopted by the CPUC in 2018[15]; $92M Legal costs on the third-party claims, according to PG&E[3]; $70M Contribution to the City of San Bruno, 2012, according to PG&E[13]; $50M Other pipeline safety remedies, a CPUC estimate[5]; $13.5M Pipeline repair, according to PG&E via NTSB[1]; $3M Criminal fine[6]; $3M Court-ordered publicity of the offenses[6]; $263,000 Value of the lost gas, according to PG&E via NTSB[1]
• Estimated: $2,437M Total paid, forgone or not recoverable
• Estimate note: Net of the $515M insurance recovery, about $1,922M. Both are our sums of the separate, non-overlapping amounts above (the four parts of the $1.6 billion, claims, legal costs, the San Bruno contribution, the ex parte remedy, the criminal fine and publicity, and the repair); the $220M property estimate and the lost gas are not added.
• Implied: Emergency response; Asset degradation (system-wide records validation); Process safety engineering; Public relations response; Market valuation
• Not supported: Spills and cleanup; Customer retention; Cost of capital; Voluntary improvements; Network event response and recovery; Network device, server, computer and embedded device replacement; Ransom extortion

PG&E received $515 million of insurance “related to $558 million of third-party claims and $92 million of legal costs,” and said it expected no more[3]. In September 2010 it had disclosed about $992 million of liability insurance above a $10 million deductible[17]. The recovery offsets the claims and legal costs only, not the penalties. Separately, PG&E’s directors-and-officers insurers agreed to pay $90 million to PG&E Corporation to settle shareholder derivative cases[18].

What this incident shows

San Bruno shows how far the cost of a single loss of containment can run beyond the physical damage. The pipe repair cost about $13.5 million; the regulatory penalties, mandated safety work, claims and other amounts brought the total to about $2.44 billion[1][2][3]. Most of it came as penalties and mandated safety work for how PG&E had run its pipeline system[5].

Two weaknesses lined up. PG&E’s records marked a seam-welded segment as seamless, which misdirected its own risk-based integrity program, and the problem reached more than 300 miles of line[4][8]. At the terminal, a response to an abnormal condition had never been engineered to fail safely: a false low-pressure reading drove the valves fully open[1].

References

1. National Transportation Safety Board. “Pacific Gas and Electric Company Natural Gas Transmission Pipeline Rupture and Fire, San Bruno, California, September 9, 2010.” NTSB Pipeline Accident Report NTSB/PAR-11/01, adopted 30 Aug. 2011. ntsb.gov/investigations/accidentreports/reports/par1101.pdf
2. California Public Utilities Commission. “CPUC President Proposes $1.6 Billion in Remedies in PG&E Pipeline Cases.” Press release, 13 Mar. 2015. docs.cpuc.ca.gov/PublishedDocs/Published/G000/M148/K796/148796687.PDF
3. PG&E Corporation. “PG&E Corporation Reports Full-Year and Fourth-Quarter 2015 Results.” News release, 18 Feb. 2016. s21.q4cdn.com/673114418/files/doc_events/2016/02/1/PG-E-Corporation-Reports-Full-Year-and-Fourth-Quarter-2015-Results-F.pdf
4. California Public Utilities Commission. “Order Instituting Investigation I.12-01-007 (San Bruno explosion).” Jan. 2012. docs.cpuc.ca.gov/PublishedDocs/PUBLISHED/FINAL_DECISION/157321-01.htm
5. California Public Utilities Commission. “CPUC Penalizes PG&E $1.6 Billion for Pipeline Violations.” Press release, 9 Apr. 2015, as carried by Electricity Forum. electricityforum.com/news-archive/apr15/cpucpenalty
6. U.S. Attorney’s Office, Northern District of California. “PG&E Ordered to Develop Compliance and Ethics Program as Part of Its Sentence for Engaging in Criminal Conduct.” U.S. Department of Justice, 26 Jan. 2017. justice.gov/usao-ndca/pr/pge-ordered-develop-compliance-and-ethics-program-part-its-sentence-engaging-criminal
7. Pipeline and Hazardous Materials Safety Administration. “Pacific Gas & Electric Pipeline Rupture in San Bruno, CA.” U.S. Department of Transportation, last updated 25 May 2017. phmsa.dot.gov/safety-awareness/pipeline/pacific-gas-electric-pipeline-rupture-san-bruno-ca
8. “PG&E Says It Misclassified California Pipelines.” CBS Sacramento, 18 Jan. 2012. cbsnews.com/sacramento/news/pge-says-it-misclassified-california-pipelines
9. PG&E Corporation and Pacific Gas and Electric Company. “Commitments and Contingencies (Tables).” Form 10-Q for the Quarter Ended March 31, 2016, SEC EDGAR, 2016. sec.gov/Archives/edgar/data/75488/000100498016000073/R26.htm
10. “PG&E To Pay $565 Million in San Bruno Pipeline Blast Settlements.” KQED, 10 Sept. 2013. kqed.org/news/110630/pge-to-pay-565-million-in-san-bruno-pipeline-blast-settlements
11. “PG&E To Pay $565M In Settlements Over San Bruno Pipeline Explosion.” CBS San Francisco, 10 Sept. 2013. cbsnews.com/sanfrancisco/news/pge-to-pay-565m-in-settlements-over-san-bruno-pipeline-explosion/
12. PG&E Corporation. Form 8-K (settlement of San Bruno third-party claims). SEC EDGAR, Sept. 2013. sec.gov/Archives/edgar/data/75488/000114036113035441/form8k.htm
13. PG&E Corporation and Pacific Gas and Electric Company. Form 10-K for the Fiscal Year Ended December 31, 2013. SEC EDGAR, 2014. sec.gov/Archives/edgar/data/0001004980/000100498014000023/annualreport.htm
14. “San Bruno Announces $70M Blast Settlement With PG&E.” CBS San Francisco, 12 Mar. 2012. cbsnews.com/sanfrancisco/news/san-bruno-announces-70m-blast-settlement-with-pge
15. California Public Utilities Commission. Revised Proposed Decision (Rev. 2) of ALJ Mason, I.15-11-015, Adopting the Settlement Agreement on Ex Parte Communications. Agenda ID 15970, Item 36, 26 Apr. 2018. docs.cpuc.ca.gov/PublishedDocs/Published/G000/M213/K578/213578533.pdf
16. “PG&E to Pay $97.5M in Penalty Over Deadly San Bruno Pipeline Blast.” KRON4, 27 Apr. 2018. digital-release.kron4.com/news/bay-area/pge-to-pay-97-5m-in-penalty-over-deadly-san-bruno-pipeline-blast/amp/
17. PG&E Corporation. Form 8-K (San Bruno relief fund and liability insurance). SEC EDGAR, 13 Sept. 2010. sec.gov/Archives/edgar/data/0001004980/000100498010000074/form8k0913sb.htm
18. PG&E Corporation. Form 8-K (proposed settlement of San Bruno shareholder derivative cases). SEC EDGAR, Mar. 2017. sec.gov/Archives/edgar/data/75488/000114036117012052/form8k.htm