Failed cables. Busted seals. Broken nozzles, clogged screens, cracked
concrete, dented containers, corroded metals and rusty underground pipes —
all of these and thousands of other problems linked to aging were uncovered
in the AP’s yearlong investigation. And all of them could escalate dangers
in the event of an accident.
Yet despite the many problems linked to aging, not a single official body in
government or industry has studied the overall frequency and potential
impact on safety of such breakdowns in recent years, even as the NRC has
extended the licenses of dozens of reactors.
Industry and government officials defend their actions, and insist that no
chances are being taken. But the AP investigation found that with billions
of dollars and 19 percent of America’s electricity supply at stake, a cozy
relationship prevails between the industry and its regulator, the NRC.
Records show a recurring pattern: Reactor parts or systems fall out of
compliance with the rules. Studies are conducted by the industry and
government, and all agree that existing standards are “unnecessarily
conservative.”
Regulations are loosened, and the reactors are back in compliance.
“That’s what they say for everything, whether that’s the case or not,” said
Demetrios Basdekas, an engineer retired from the NRC. “Every time you turn
around, they say ‘We have all this built-in conservatism.’”
The ongoing crisis at the stricken, decades-old Fukushima Dai-ichi nuclear
facility in Japan has focused attention on the safety of plants elsewhere in
the world; it prompted the NRC to look at U.S. reactors, and a report is due
in July.
But the factor of aging goes far beyond the issues posed by the disaster at
Fukushima.
Commercial nuclear reactors in the United States were designed and licensed
for 40 years. When the first ones were being built in the 1960s and 1970s,
it was expected that they would be replaced with improved models long before
those licenses expired.
But that never happened. The 1979 accident at Three Mile Island, massive
cost overruns, crushing debt and high interest rates ended new construction
proposals for several decades.
Instead, 66 of the 104 operating units have been relicensed for 20 more
years, mostly with scant public attention. Renewal applications are under
review for 16 other reactors.
By the standards in place when they were built, these reactors are old and
getting older. As of today, 82 reactors are more than 25 years old.
The AP found proof that aging reactors have been allowed to run less safely
to prolong operations. As equipment has approached or violated safety
limits, regulators and reactor operators have loosened or bent the rules.
Last year, the NRC weakened the safety margin for acceptable radiation
damage to reactor vessels — for a second time. The standard is based on a
measurement known as a reactor vessel’s “reference temperature,” which
predicts when it will become dangerously brittle and vulnerable to failure.
Over the years, many plants have violated or come close to violating the
standard.
As a result, the minimum standard was relaxed first by raising the reference
temperature 50 percent, and then 78 percent above the original — even though
a broken vessel could spill its radioactive contents into the environment.
“We’ve seen the pattern,” said nuclear safety scientist Dana Powers, who
works for Sandia National Laboratories and also sits on an NRC advisory
committee. “They’re ... trying to get more and more out of these plants.”
___
SHARPENING THE PENCIL
The AP collected and analyzed government and industry documents — including
some never-before released. The examination looked at both types of reactor
designs: pressurized water units that keep radioactivity confined to the
reactor building and the less common boiling water types like those at
Fukushima, which send radioactive water away from the reactor to drive
electricity-generating turbines.
Tens of thousands of pages of government and industry studies were examined,
along with test results, inspection reports and regulatory policy statements
filed over four decades. Interviews were conducted with scores of managers,
regulators, engineers, scientists, whistleblowers, activists, and residents
living near the reactors, which are located at 65 sites, mostly in the East
and Midwest.
AP reporting teams toured some of the oldest reactors — the unit here at
Oyster Creek, near the Atlantic coast 50 miles east of Philadelphia, and two
units at Indian Point, 25 miles north of New York City along the Hudson
River.
Called “Oyster Creak” by some critics because of its aging problems, this
boiling water reactor began running in 1969 and ranks as the country’s
oldest operating commercial nuclear power plant. Its license was extended in
2009 until 2029, though utility officials announced in December that they’ll
shut the reactor 10 years earlier rather than build state-ordered cooling
towers. Applications to extend the lives of pressurized water units 2 and 3
at Indian Point, each more than 36 years old, are under review by the NRC.
Unprompted, several nuclear engineers and former regulators used nearly
identical terminology to describe how industry and government research has
frequently justified loosening safety standards to keep aging reactors
within operating rules. They call the approach “sharpening the pencil” or
“pencil engineering” — the fudging of calculations and assumptions to yield
answers that enable plants with deteriorating conditions to remain in
compliance.
“Many utilities are doing that sort of thing,” said engineer Richard T.
Lahey Jr., who used to design nuclear safety systems for General Electric
Co., which makes boiling water reactors. “I think we need nuclear power, but
we can’t compromise on safety. I think the vulnerability is on these older
plants.”
Added Paul Blanch, an engineer who left the industry over safety issues but
later returned to work on solving them: “It’s a philosophical position that
(federal regulators) take that’s driven by the industry and by the
economics: What do we need to do to let those plants continue to operate?
They somehow sharpen their pencil to either modify their interpretation of
the regulations, or they modify their assumptions in the risk assessment.”
In public pronouncements, industry and government say aging is well under
control. “I see an effort on the part of this agency to always make sure
that we’re doing the right things for safety. I’m not sure that I see a
pattern of staff simply doing things because there’s an interest to reduce
requirements — that’s certainly not the case,” NRC chairman Gregory Jaczko
said in an interview at agency headquarters in Rockville, Md.
Neil Wilmshurst, director of plant technology for the industry’s Electric
Power Research Institute, acknowledged that the industry and NRC often
collaborate on research that supports rule changes. But he maintained that
there’s “no kind of misplaced alliance ... to get the right answer.”
Yet agency staff, plant operators, and consultants paint a different picture
in little-known reports, where evidence of industry-wide problems is
striking:
—The AP reviewed 226 preliminary notifications — alerts on emerging safety
problems — issued by the NRC since 2005. Wear and tear in the form of
clogged lines, cracked parts, leaky seals, rust and other deterioration
contributed to at least 26 alerts over the past six years. Other
notifications lack detail, but aging also was a probable factor in 113
additional alerts. That would constitute up to 62 percent in all. For
example, the 39-year-old Palisades reactor in Michigan shut Jan. 22 when an
electrical cable failed, a fuse blew, and a valve stuck shut, expelling
steam with low levels of radioactive tritium into the air outside. And a
one-inch crack in a valve weld aborted a restart in February at the LaSalle
site west of Chicago.
—One 2008 NRC report blamed 70 percent of potentially serious safety
problems on “degraded conditions.” Some involve human factors, but many stem
from equipment wear, including cracked nozzles, loose paint, electrical
problems, or offline cooling components.
—Confronted with worn parts that need maintenance, the industry has
repeatedly requested — and regulators have often allowed — inspections and
repairs to be delayed for months until scheduled refueling outages. Again
and again, problems worsened before they were fixed. Postponed inspections
inside a steam generator at Indian Point allowed tubing to burst, leading to
a radioactive release in 2000. Two years later, cracking was allowed to grow
so bad in nozzles on the reactor vessel at the Davis-Besse plant near
Toledo, Ohio, that it came within two months of a possible breach, the NRC
acknowledged in a report. A hole in the vessel could release radiation into
the environment, yet inspections failed to catch the same problem on the
replacement vessel head until more nozzles were found to be cracked last
year.
___
TIME CRUMBLES THINGS
Nuclear plants are fundamentally no more immune to the incremental abuses of
time than our cars or homes: Metals grow weak and rusty, concrete crumbles,
paint peels, crud accumulates. Big components like 17-story-tall concrete
containment buildings or 800-ton reactor vessels are all but impossible to
replace. Smaller parts and systems can be swapped, but still pose risks as a
result of weak maintenance and lax regulation or hard-to-predict failures.
Even when things are fixed or replaced, the same parts or others nearby
often fail later.
Even mundane deterioration at a reactor can carry harsh consequences.
For example, peeling paint and debris can be swept toward pumps that
circulate cooling water in a reactor accident. A properly functioning
containment building is needed to create air pressure that helps clear those
pumps. The fact is, a containment building could fail in a severe accident.
Yet the NRC has allowed operators to make safety calculations that assume
containment buildings will hold.
In a 2009 letter, Mario V. Bonaca, then-chairman of the NRC’s Advisory
Committee on Reactor Safeguards, warned that this approach represents “a
decrease in the safety margin” and makes a fuel-melting accident more
likely. At Fukushima, hydrogen explosions blew apart two of six containment
buildings, allowing radiation to escape from overheated fuel in storage
pools.
Many photos in NRC archives — some released in response to AP requests under
the federal Freedom of Information Act — show rust accumulated in a thick
crust or paint peeling in long sheets on untended equipment at nuclear
plants. Other breakdowns can’t be observed or predicted, even with
sophisticated analytic methods — especially for buried, hidden or
hard-to-reach parts.
Industry and government reports are packed with troubling evidence of
unrelenting wear — and repeated regulatory compromises.
Four areas stand out:
BRITTLE VESSELS: For years, operators have rearranged fuel rods to limit
gradual radiation damage to the steel vessels protecting the core and to
keep them strong enough to meet safety standards.
It hasn’t worked well enough.
Even with last year’s weakening of the safety margins, engineers and metal
scientists say some plants may be forced to close over these concerns before
their licenses run out — unless, of course, new compromises with regulations
are made. But the stakes are high: A vessel damaged by radiation becomes
brittle and prone to cracking in certain accidents at pressurized water
reactors, potentially releasing its radioactive contents into the
environment.
LEAKY VALVES: Operators have repeatedly violated leakage standards for
valves designed to bottle up radioactive steam in the event of earthquakes
and other accidents at boiling water reactors.
Many plants have found they could not adhere to the general standard
allowing each of these parts — known as main steam isolation valves — to
leak at a rate of no more than 11.5 cubic feet per hour. In 1999, the NRC
decided to permit individual plants to seek amendments of up to 200 cubic
feet per hour for all four steam valves combined.
But plants keep violating even those higher limits. For example, in 2007,
Hatch Unit 2, in Baxley, Ga., reported combined leakage of 574 cubic feet
per hour.
CRACKED TUBING: The industry has long known of cracking in steel alloy
tubing originally used in the steam generators of pressurized water
reactors. Ruptures were rampant in these tubes containing radioactive
coolant; in 1993 alone, there were seven. Even today, as many as 18 reactors
are still running on old generators.
Problems can arise even in a newer metal alloy, according to a report of a
2008 industry-government workshop.
CORRODED PIPING: Nuclear operators have failed to stop an epidemic of leaks
in pipes and other underground equipment in damp settings. The country’s
nuclear sites have suffered more than 400 accidental radioactive leaks
during their history, the activist Union of Concerned Scientists reported in
September.
Plant operators have been drilling monitoring wells and patching hidden or
buried piping and other equipment for several years to control an escalating
outbreak.
Here, too, they have failed. Between 2000 and 2009, the annual number of
leaks from underground piping shot up fivefold, according to an internal
industry document obtained and analyzed by the AP.
___
CONCERNS OF LONG STANDING
Even as they reassured the public, regulators have been worrying about aging
reactors since at least the 1980s, when the first ones were entering only
their second decade of operation. A 1984 report for the NRC blamed wear,
corrosion, crud and fatigue for more than a third of 3,098 failures of parts
or systems within the first 12 years of industry operations; the authors
believed the number was actually much higher.
A decade later, in 1994, the NRC reported to Congress that the critical
shrouds lining reactor cores were cracked at a minimum of 11 units,
including five with extensive damage. The NRC ordered more aggressive
maintenance, but an agency report last year said cracking of internal core
components — spurred by radiation — remains “a major concern” in boiling
water reactors.
A 1995 study by Oak Ridge National Laboratory covering a seven-year period
found that aging contributed to 19 percent of scenarios that could have
ended in severe accidents.
In 2001, the Union of Concerned Scientists, which does not oppose nuclear
power, told Congress that aging problems had shut reactors eight times
within 13 months.
And an NRC presentation for an international workshop that same year warned
of escalating wear at reactor buildings meant to bottle up radiation during
accidents. A total of 66 cases of damage were cited in the presentation,
with corrosion reported at a quarter of all containment buildings. In at
least two cases — at the two-reactor North Anna site 40 miles northwest of
Richmond, Va., and the two-unit Brunswick facility near Wilmington, N.C. —
steel containment liners designed to shield the public had rusted through.
And in 2009, a one-third-inch hole was discovered in a liner at Beaver
Valley Unit 1 in Shippingport, Pa.
Long-standing, unresolved problems persist with electrical cables, too.
In a 1993 report labeled “official use only,” an NRC staffer warned that
electrical parts throughout plants were subject to dangerous age-related
breakdowns unforeseen by the agency. Almost a fifth of cables failed in
testing that simulated the effects of 40 years of wear. The report warned
that as a result, reactor core damage could occur much more often than
expected.
Fifteen years later, the problem appeared to have worsened. An NRC report
warned in 2008 that rising numbers of electrical cables are failing with
age, prompting temporary shutdowns and degrading safety. Agency staff
tallied 269 known failures over the life of the industry.
Two industry-funded reports obtained by the AP said that managers and
regulators have worried increasingly about the reliability of sometimes wet,
hard-to-reach underground cables over the past five-to-10 years. One of the
reports last year acknowledged many electrical-related aging failures at
plants around the country.
“Multiple cable circuits may fail when called on to perform functions
affecting safety,” the report warned.
___
EATEN AWAY FROM WITHIN
Few aging problems have been more challenging than chemical corrosion from
within.
In one of the industry’s worst accidents, a corroded pipe burst at
Virginia’s Surry 2 reactor in 1986 and showered workers with scalding steam,
killing four.
In summer 2001, the NRC was confronted with a new problem: Corrosive
chemicals were cracking nozzles on reactors. But the NRC let operators delay
inspections to coincide with scheduled outages. Inspection finally took
place in February 2002 at the Davis-Besse unit in Ohio.
What workers found shocked the industry.
They discovered extensive cracking and a place where acidic boron had
spurted from the reactor and eaten a gouge as big as a football. When the
problem was found, just a fraction of an inch of inner lining remained. An
NRC analysis determined that the vessel head could have burst within two
months — what former NRC Commissioner Peter Bradford has called a “near
rupture” which could have released large amounts of radiation into the
environment.
In 2001-3 alone, at least 10 plants developed these cracks, according to an
NRC analysis.
Industry defenders blame human failings at Davis-Besse. Owner FirstEnergy
Corp. paid a $28 million fine, and courts convicted two plant employees of
hiding the deterioration. NRC spokesman Scott Burnell declared that the
agency “learned from the incident and improved resident inspector training
and knowledge-sharing to ensure that such a situation is never repeated.”
Yet on the same March day last year that Burnell’s comments were released,
Davis-Besse workers again found dried boron on the nozzles of a replacement
vessel head, indicating more leaks. Inspecting further, they again found
cracks in 24 of 69 nozzles.
“We were not expecting this issue,” said plant spokesman Todd Schneider.
In August, the operator applied for a 20-year license extension. Under
pressure from the NRC, the company has agreed to replace the replacement
head in October.
As far back as the 1990s, the industry and NRC also were well aware that the
steel-alloy tubing in many steam generators was subject to chemical
corrosion. It could crack over time, releasing radioactive gases that can
bypass the containment building. If too much spurts out, there may be too
little water to cool down the reactor, prompting a core melt.
In 1993, NRC personnel reported seven outright ruptures inside the
generators, several forced outages per year, and some complete replacements.
Personnel at the Catawba plant near Charlotte, N.C., found more than 8,000
corroded tubes — more than half its total.
For plants with their original generators, “there is no end in sight to the
steam generator tube degradation problems,” a top agency manager declared.
NRC staffers warned: “Crack depth is difficult to measure reliably and the
crack growth rate is difficult to determine.”
Yet no broad order was issued for shutdowns to inspect generators.
Instead, the staff began to talk to operators about how to deal with the
standard that no cracks could go deeper than 40 percent through the tube
wall.
In 1995, the NRC staff put out alternative criteria that let reactors keep
running if they could reach positive results with remote checks known as
“eddy-currents tests.” The new test standard gave more breathing room to
reactors.
According to a 2001 report by the Advisory Committee on Reactor Safeguards,
the staff “acknowledged that there would be some possibility that cracks of
objectionable depth might be overlooked and left in the steam generator for
an additional operating cycle.” The alternative, the report said, would be
to repair or remove potentially many tubes from service.
NRC engineer Joe Hopenfeld, who had worked previously in the industry,
challenged this approach at the time from within the agency. He warned that
multiple ruptures in corroded tubing could release radiation. The NRC said
radiation would be confined.
Hopenfeld now says this conclusion wasn’t based on solid analysis but
“wishful thinking” and research meant to reach a certain conclusion —
another instance of “sharpening the pencil.”
“It was a hard problem to solve, and they did not want to say it was a
problem, because if they really said it was a problem, they would have to
shut down a lot of reactors.”
___
AGE IS NO ISSUE, SAYS INDUSTRY
With financial pressures mounting in the 1990s to extend the life of aging
reactors, new NRC calculations using something called the “Master Curve” put
questionable reactor vessels back into the safe zone.
A 1999 NRC review of the Master Curve, used to analyze metal toughness,
noted that energy deregulation had put financial pressure on nuclear plants.
It went on: “So utility executives are considering new operational
scenarios, some of which were unheard of as little as five years ago:
extending the licensed life of the plant beyond 40 years.” As a result, it
said, the industry and the NRC were considering “refinements” of
embrittlement calculations “with an eye to reducing known
over-conservatisms.”
Asked about references to economic pressures, NRC spokesman Burnell said
motivations are irrelevant if a technology works.
Former NRC commissioner Peter Lyons said, “There certainly is plenty of
research ... to support a relaxation of the conservativisms that had been
built in before. I don’t see that as decreasing safety. I see that as an
appropriate standard.”
Though some parts are too big and too expensive to replace, industry
defenders also point out that many others are routinely replaced over the
years.
Tony Pietrangelo, chief nuclear officer of the industry’s Nuclear Energy
Institute, acknowledges that you’d expect to see a growing failure rate at
some point — “if we didn’t replace and do consistent maintenance.”
In a sense, then, supporters of aging nukes say an old reactor is
essentially a collection of new parts.
“When a plant gets to be 40 years old, about the only thing that’s 40 years
old is the ink on the license,” said NRC chief spokesman Eliot Brenner.
“Most, if not all of the major components, will have been changed out.”
Oyster Creek spokesman David Benson said the reactor “is as safe today as
when it was built.”
Yet plant officials have been trying to arrest rust on its 100-foot-high,
radiation-blocking steel drywell for decades. The problem was declared
solved long ago, but a rust patch was found again in late 2008. Benson said
the new rust was only the size of a dime, but acknowledged there was “some
indication of water getting in.”
In an effort to meet safety standards, aging reactors have been forced to
come up with backfit on top of backfit.
As Ivan Selin, a retired NRC chairman, put it: “It’s as if we were all
driving Model T’s today and trying to bring them up to current mileage
standards.”
For example, the state of New Jersey — not the NRC — had ordered Oyster
Creek to build cooling towers to protect sea life in nearby Barnegat Bay.
Owner Exelon Corp. said that would cost about $750 million and force it to
close the reactor — 20-year license extension notwithstanding. Even with the
announcement to close in 2019, Oyster Creek will have been in operation for
50 years.
Many of the safety changes have been justified by something called
“risk-informed” analysis, which the industry has employed widely since the
1990s: Regulators set aside a strict check list applied to all systems and
focus instead on features deemed to carry the highest risk.
But one flaw of risk-informed analysis is that it doesn’t explicitly account
for age. An older reactor is not viewed as inherently more unpredictable
than a younger one. Ed Lyman, a physicist with the Union of Concerned
Scientists, says risk-informed analysis has usually served “to weaken
regulations, rather than strengthen them.”
Even without the right research, the NRC has long reserved legal wiggle room
to enforce procedures, rules and standards as it sees fit. A 2008 position
paper by the industry group EPRI said the approach has brought “a more
tractable enforcement process and a significant reduction in the number of
cited violations.”
But some safety experts call it “tombstone regulation,” implying that
problems fester until something goes very wrong. “Until there are
tombstones, they don’t regulate,” said Blanch, the longtime industry
engineer who became a whistleblower.
Barry Bendar, a database administrator who lives one mile from Oyster Creek,
said representatives of Exelon were asked at a public meeting in 2009 if the
plant had a specific life span.
“Their answer was, ‘No, we can fix it, we can replace, we can patch,’” said
Bendar. “To me, everything reaches an end of its life span.”
___
The AP National Investigative Team can be reached at investigate(at)ap.org