On October 29, 2018, Lion Air Flight 610 took off from Jakarta, Indonesia, and plunged into the Java Sea twelve minutes later. All 189 people on board were killed. Less than five months later, on March 10, 2019, Ethiopian Airlines Flight 302 crashed six minutes after takeoff from Addis Ababa, killing all 157 passengers and crew. Both aircraft were Boeing 737 MAX 8s — the newest, most advanced version of the world’s most popular commercial airplane. Both crashes were caused by the same automated system: MCAS, the Maneuvering Characteristics Augmentation System, a piece of software that most pilots didn’t know existed and that Boeing had fought to keep out of training manuals and regulatory oversight.
The 737 MAX crisis killed 346 people, grounded an entire aircraft model for nearly two years, cost Boeing over $20 billion, and exposed a corporate culture that had prioritized speed, cost-cutting, and shareholder returns over the safety of the flying public. It is the story of what happens when a great engineering company becomes a great financial engineering company — and the human cost of that transformation.
The Origins: Boeing vs. Airbus
The 737 MAX was born from competitive panic. In 2010, Airbus announced the A320neo — a new version of its bestselling narrow-body jet fitted with fuel-efficient engines that promised airlines 15% savings in fuel costs. The A320neo was an immediate hit, with American Airlines placing a blockbuster order that sent shockwaves through Boeing’s boardroom.
Boeing faced a choice: design an entirely new airplane to compete with the neo, or retrofit the existing 737 airframe with new engines and call it a day. A new aircraft would take eight to ten years and cost tens of billions of dollars. Updating the 737 could be done in six years for a fraction of the price. The board chose speed and cost. The 737 MAX was born.
The decision created a fundamental engineering problem. The 737’s airframe dated back to the 1960s, designed when jet engines were narrow and could be mounted close to the ground beneath the wings. The new CFM LEAP engines that would give the MAX its fuel efficiency were significantly larger. To fit them under the 737’s low-slung wings, Boeing’s engineers had to mount the engines further forward and higher on the wing than on previous models. This changed the aircraft’s aerodynamic characteristics, creating a tendency for the nose to pitch up in certain flight conditions — a potentially dangerous behavior that could lead to a stall.
MCAS: The Software Patch
Rather than redesign the airframe, Boeing created a software fix: the Maneuvering Characteristics Augmentation System, or MCAS. The system was designed to automatically push the nose of the aircraft down if sensors detected that the angle of attack — the angle between the wing and the oncoming airflow — was too high, indicating a potential stall.
The original MCAS design was relatively modest in its authority. But during flight testing, Boeing’s engineers expanded the system’s power significantly — allowing it to move the horizontal stabilizer (the small wing on the tail that controls the aircraft’s pitch) to a much greater degree than originally planned. The revised MCAS could push the nose down with enough force to override the pilots’ manual inputs.
Critically, MCAS relied on data from a single angle-of-attack sensor. If that sensor malfunctioned — providing a false reading that the nose was too high — MCAS would activate and push the nose down, even when the aircraft was flying normally. There was no redundancy, no cross-check against the second sensor on the other side of the aircraft. A single faulty sensor could trigger a system powerful enough to crash the plane.
Boeing made a calculated decision not to highlight MCAS in pilot training materials. If the system was disclosed as a significant new feature, regulators might require simulator training for pilots transitioning from older 737 models to the MAX — a costly requirement that would undermine one of the MAX’s key selling points: that airlines could transition their existing 737 pilots to the new plane with only a brief iPad-based training course. Boeing’s marketing promised airlines that the MAX would require no additional simulator time. MCAS had to remain invisible to keep that promise.
The FAA and the Foxes Guarding the Henhouse
The Federal Aviation Administration, the agency responsible for certifying the 737 MAX as safe to fly, delegated much of the safety analysis to Boeing itself through a program called Organization Designation Authorization (ODA). Under ODA, Boeing employees — paid by Boeing, evaluated by Boeing, promoted by Boeing — conducted safety assessments and signed off on design decisions on behalf of the FAA.
The system was designed to cope with the FAA’s limited resources. The agency simply didn’t have enough engineers to independently evaluate every aspect of every new aircraft. Delegation to manufacturers was presented as a practical necessity. But in practice, it created an inherent conflict of interest: the people responsible for identifying safety problems were employed by the company that had a financial incentive to minimize those problems.
Multiple Boeing engineers later testified that they had been pressured to minimize safety findings, that concerns about MCAS had been raised internally and dismissed, and that the corporate culture punished employees who slowed down the certification timeline. The FAA, for its part, did not independently analyze the revised MCAS system after Boeing expanded its authority during development. The agency essentially rubber-stamped Boeing’s own assessment that the system was safe.
Lion Air Flight 610
On the morning of October 29, 2018, Lion Air Flight 610 departed Jakarta with 189 people aboard. Almost immediately after takeoff, the aircraft’s left angle-of-attack sensor began transmitting erroneous data, indicating that the nose was pointed dangerously high. MCAS activated, pushing the nose down. The pilots pulled back on their control columns, fighting the system. MCAS activated again. And again. For twelve agonizing minutes, the pilots battled an automated system they didn’t understand, pulling the nose up while MCAS pushed it down, the aircraft oscillating violently over the Java Sea.
They never gained control. The aircraft hit the water at over 400 miles per hour. There were no survivors.
In the aftermath, Boeing issued a bulletin to 737 MAX operators describing the MCAS system and the procedure for disabling it — information that had not been included in the original flight manual. The company blamed the Lion Air pilots for failing to follow existing procedures. Boeing’s CEO, Dennis Muilenburg, publicly stated that the 737 MAX was safe and that no software changes were needed.
Ethiopian Airlines Flight 302
On March 10, 2019, Ethiopian Airlines Flight 302 took off from Addis Ababa bound for Nairobi. The captain, Yared Getachew, was one of Ethiopian Airlines’ most experienced pilots. Six minutes after takeoff, the same scenario unfolded: a faulty angle-of-attack sensor triggered MCAS, which began forcing the nose down. The pilots followed Boeing’s recommended procedure — they disabled the automated trim system. But with MCAS having already pushed the horizontal stabilizer to an extreme position, the aerodynamic forces on the tail were so powerful that the pilots physically could not pull it back using the manual trim wheel. They were trapped.
In desperation, they re-enabled the electric trim system to try to regain control. MCAS immediately activated again, pushing the nose further down. The aircraft hit the ground at over 500 miles per hour, creating a crater 30 feet deep. All 157 people on board were killed.
The Grounding and the Reckoning
Within days of the Ethiopian crash, aviation authorities around the world grounded the 737 MAX — with the FAA, under intense political pressure, being among the last to act. The grounding lasted nearly two years, the longest in modern aviation history. Boeing halted MAX production, airlines canceled orders, and the company’s stock price collapsed.
Congressional investigations revealed a pattern of institutional failure. Internal Boeing communications — released during hearings — showed employees mocking the FAA’s oversight, boasting about getting the MAX certified without simulator training requirements, and expressing concerns about MCAS that management had dismissed. One employee wrote: “This airplane is designed by clowns, who in turn are supervised by monkeys.”
In January 2021, Boeing agreed to pay $2.5 billion to settle federal criminal charges of conspiracy to defraud the FAA — including $500 million for a fund to compensate the victims’ families. Dennis Muilenburg was fired in December 2019 and received a $62 million exit package. No Boeing executive was criminally charged for the deaths of 346 people.
The Transformation of Boeing
The deeper story of the 737 MAX is the story of Boeing’s transformation from an engineering company into a financial one. When Boeing merged with McDonnell Douglas in 1997, it was McDonnell Douglas’s management culture — focused on cost-cutting, outsourcing, and shareholder returns — that prevailed. Boeing’s headquarters moved from Seattle, where its engineers lived and worked, to Chicago, far from the factory floor. Executive compensation was increasingly tied to stock price performance rather than engineering excellence.
The consequences were predictable. Engineering decisions were increasingly made on the basis of cost and schedule rather than safety and quality. The 737 MAX was not a new airplane but a series of compromises designed to avoid the expense of a clean-sheet design. MCAS was not a safety system but a patch — a software workaround for a hardware problem that Boeing didn’t want to spend the money to fix properly.
The 346 people who died on Lion Air 610 and Ethiopian 302 were not killed by a software bug. They were killed by a corporate culture that had lost sight of its founding purpose — to build the safest, most reliable aircraft in the world — and replaced it with a single-minded focus on quarterly earnings, stock buybacks, and competitive positioning.
Watch the Full Story
Video coming soon — subscribe to The Ledger on YouTube to be notified when it drops.
Go Deeper
📚 Flying Blind by Peter Robison — The definitive investigation into how Boeing lost its way, from the McDonnell Douglas merger to the 737 MAX disasters.
📖 Explore more stories like this on our Recommended Reading page.
More From The Ledger
- General Electric — Another American icon destroyed by financial engineering
- Enron — When corporate culture goes catastrophically wrong
- Lehman Brothers — Hubris, leverage, and the destruction of a 158-year-old institution
Browse all stories on our Stories page.
🔔 Subscribe to The Ledger on YouTube for new investigations every week.