McDonnell Douglas DC-10-10
The original domestic-range variant of the DC-10 widebody trijet. Certified in 1971 for US transcontinental service, it became the type's public face during a string of high-profile accidents in the 1970s that reshaped cargo-door design, engine-pylon inspection, and slat-hydraulic redundancy across the industry.
Fleet Safety Record
1971–2014 (passenger); limited freighter use after122 DC-10-10 airframes built (of 386 DC-10s total across all variants). The -10 was the short-range domestic version powered by GE CF6-6 engines and operated primarily by American, United, Continental, National, and Western. Passenger service in the US wound down through the 1990s; final scheduled passenger flights (Biman, Northwest) occurred in the mid-2000s, with the last commercial passenger operator (Biman) retiring the type in 2014.
In BlackBoxWiki Archive
Design Lineage
The DC-10-10 entered service with American Airlines in August 1971 as McDonnell Douglas's first widebody, competing directly with the Lockheed L-1011. Its three-engine layout — two under the wings, one through the vertical stabilizer — gave it twin-aisle economics on routes that couldn't fill a 747. The -10 variant used GE CF6-6 engines and a lower MTOW than the later -30/-40 international versions, and did not include the center-body landing gear fitted to heavier subtypes.
The Cargo Door Problem
The DC-10's outward-opening cargo door used an over-center latching mechanism that could indicate 'locked' while actually being under-latched. A partial door failure caused a near-disaster on American Airlines 96 over Windsor in 1972, followed by the catastrophic loss of Turkish Airlines 981 outside Paris in 1974 — 346 dead, the world's deadliest crash at the time. The floor above the cargo bay collapsed on decompression, severing the control cables that ran through it. The subsequent redesign (vent doors, revised latch geometry, floor-vent panels) became a template for how the industry treats decompression survivability.
AA191 and the Grounding
In May 1979, American Airlines 191 lost its left engine and pylon on rotation from Chicago O'Hare, rolled inverted, and crashed — 273 dead, still the deadliest accident on US soil. The cause was a maintenance shortcut: airlines were removing engine and pylon as a single unit using a forklift, cracking the aft pylon bulkhead. The FAA grounded the entire DC-10 fleet for 37 days — the last time a US-certified airliner type has been fully grounded on airworthiness grounds until the 737 MAX in 2019.
UA232 and Uncontained Failure
United 232 in 1989 lost all three hydraulic systems when the tail-mounted engine's fan disk failed and severed every hydraulic line at their common routing point behind the aft pressure bulkhead. The crew's use of differential thrust to steer the aircraft to Sioux City — with 185 of 296 surviving a crash landing — is a textbook case in CRM and airmanship, but it also exposed a design assumption (triple-redundant hydraulics converging in one physical location) that the industry no longer tolerates. Titanium fan-disk inspection intervals were tightened across the CF6 fleet.
Notable Accidents
- American 96· 1972Cargo door blew open over Windsor, Ontario; floor collapsed and severed control cables. Crew landed safely — but the warning was ignored for two years.
- Turkish 981· 1974Same cargo-door failure mode as AA96, this time catastrophic. Explosive decompression over Ermenonville forest, France; 346 fatalities.
- American 191· 1979Left engine and pylon separated on takeoff rotation from Chicago O'Hare after improper maintenance cracked the pylon bulkhead. 273 fatalities; entire DC-10 type grounded for 37 days.
- United 232· 1989Uncontained tail-engine fan-disk failure severed all three hydraulic systems. Crew used differential thrust to reach Sioux City; 185 of 296 survived a crash landing.
Recurring Causal Patterns
- Cargo-door latch geometry vs. floor-decompression survivability (pre-1976 airframes)
- Maintenance-induced structural damage from unapproved engine/pylon removal procedures
- Common-routing single-point failures in hydraulic and control systems
- Slat asymmetry and hydraulic actuator issues on approach
Regulatory & Industry Response
- FAA airworthiness directives on cargo-door latching, vent doors, and pressure-relief panels after AA96/TK981
- 37-day type grounding in 1979; new maintenance procedures forbidding engine+pylon removal as a unit
- Post-UA232 redesign guidance requiring physical separation of redundant hydraulic runs on new type certifications
- Sonic and eddy-current inspection intervals tightened on CF6 fan disks across the fleet
Verdict
The DC-10-10's early years produced the most consequential accident sequence in wide-body history: cargo-door design, decompression survivability, maintenance-induced damage, and hydraulic redundancy were all rewritten because of it. The airframe itself matured into a reliable freighter workhorse — but the lessons cost more lives than any other Western jet program, and they set the modern regulatory bar for how certification treats single-point failures.