Boeing 737 MAX: the engineering and brand crisis that killed 346 people and reset aviation regulation

The competitive context: Airbus A320neo pressure

In 2010-2011, Airbus launched the A320neo — a re-engined version of the A320 with more fuel-efficient engines. The neo's economics threatened Boeing's 737 franchise, which had been the workhorse of narrow-body aviation since the 1960s. Boeing initially considered an entirely new clean-sheet design but eventually chose to re-engine the existing 737 to bring the new aircraft to market faster (the 737 MAX program was launched in 2011, two years after the A320neo).

The re-engine choice was commercially rational but engineering-constrained. The 737's low ground clearance (it was designed in the 1960s for unimproved runways and stair-boarding) meant the larger new engines had to be mounted further forward and higher on the wing. This changed the aircraft's flight handling, particularly its tendency to pitch up under high-angle-of-attack conditions. Boeing's engineering solution: a software system called MCAS that would automatically push the nose down if it detected high angle of attack.

MCAS, the design flaw, and the disclosure failure

MCAS as originally designed was modest: it would activate only in certain flap-up high-angle-of-attack scenarios and would have limited authority. During development, Boeing made several decisions that expanded MCAS's authority and made it more dangerous:

• MCAS was given more authority to push the nose down as Boeing engineers discovered the pitch issue was more pronounced than initially modeled.
• MCAS relied on a single angle-of-attack sensor rather than cross-checking both sensors on the aircraft. A failed or miscalibrated sensor (which is what happened in both crashes) would feed bad data to MCAS.
• MCAS was not disclosed to pilots in the standard 737 MAX flight manual. Boeing argued that pilots already knew how to handle a runaway-trim condition (the symptom MCAS failure would create), so a separate MCAS disclosure wasn't necessary. This was an explicit commercial choice: requiring simulator training on MCAS would have triggered a fleet-wide retraining requirement for airlines, undermining a key 737 MAX sales pitch (no new simulator training needed).
• The FAA's oversight of MCAS was inadequate; key documentation about MCAS's expanded authority was not properly reviewed by FAA engineers, who relied substantially on Boeing's own self-certification under the ODA (Organization Designation Authorization) program.

The crashes and the grounding

On October 29, 2018, Lion Air Flight 610 took off from Jakarta. Faulty angle-of-attack sensor data triggered MCAS repeatedly during the climb, pushing the nose down against pilot inputs. The crew did not have adequate documentation or training to identify MCAS as the source of the runaway trim. The aircraft crashed into the Java Sea 13 minutes after takeoff; all 189 on board were killed.

On March 10, 2019, Ethiopian Airlines Flight 302 took off from Addis Ababa. Almost identical MCAS-driven runaway trim sequence. Despite the crew having been alerted to the Lion Air investigation findings, the time available to diagnose and disable MCAS was insufficient. The aircraft crashed 6 minutes after takeoff; all 157 on board were killed.

Within days, China grounded the 737 MAX. Other regulators followed. The FAA initially resisted but grounded the fleet on March 13, 2019. The grounding lasted approximately 20 months in the US and longer in some other jurisdictions. During the grounding, Boeing rewrote MCAS (multi-sensor cross-check, reduced authority, single activation per high-AOA event), revised pilot training requirements (simulator training now required), and worked through extensive FAA recertification.

The financial, regulatory, and brand fallout

Boeing's direct costs from the 737 MAX crisis exceeded $20 billion across compensation to airlines, settlement payments to crash-victim families, lost orders, and the cost of building and storing undelivered aircraft. Boeing's market cap dropped roughly $50 billion at the peak of the crisis. CEO Dennis Muilenburg was fired in December 2019. Multiple congressional hearings investigated the program; the House Committee on Transportation produced a damning report in September 2020 calling the crashes 'a horrific culmination' of cultural failures.

In January 2021, Boeing entered a deferred prosecution agreement with the DOJ involving a $2.5 billion penalty (criminal fine + airline compensation + crash-victim fund). The DPA was controversial; victims' families argued it inadequately addressed Boeing's wrongdoing. In May 2022, a federal judge rejected the DPA's structure, finding the victims' rights had not been adequately considered (the procedural ruling didn't void the DPA but criticized the process).

Subsequent events have continued the story. In January 2024, a door plug blew off an Alaska Airlines 737 MAX 9 mid-flight (no fatalities but the incident triggered another fleet inspection round). Investigations attributed the issue to manufacturing quality problems at Boeing's 737 production line and at supplier Spirit AeroSystems. Boeing's CEO Dave Calhoun announced his departure in March 2024 amid renewed regulatory and customer pressure.

How RGM thinks about engineering-driven brand crises

The 737 MAX is the worked example for clients in engineering- or product-quality-driven industries (aviation, automotive, medical devices, pharma, software-with-safety-critical-implications). The crisis was not primarily a marketing or PR failure — it was an engineering and process failure that no marketing response could have repaired. Boeing's brand damage was a downstream consequence of decisions made years earlier inside the engineering and product organizations.

The honest framework: in industries where product failure has human-safety consequences, the marketing and brand functions cannot save the company if engineering and product organizations have made unrecoverable decisions. The brand recovery path requires structural changes to engineering culture, safety processes, and regulatory relationships, executed over years. Marketing can support that recovery but cannot lead it. We tell clients in safety-critical categories that the time to invest in product safety, engineering culture, and regulatory transparency is before any crisis, because the marketing and PR options after a crisis are limited and slow.

Frequently asked questions

Related