← back to the reports
FO-015 RO-RO ferry · El Salam Maritime, Duba–Safaga 2006

MS al-Salam Boccaccio 98 — A Car-Deck Fire, Trapped Water, and a Capsize in the Red Sea

Killed
~1,000 (estimate; 1,031 reported)
Vessel
RO-RO ferry
Operator
El Salam Maritime Transport (Duba–Safaga)
Status
Multi-factor

Summary

In the small hours of 3 February 2006, the Egyptian roll-on/roll-off ferry MS al-Salam Boccaccio 98 capsized and sank in the Red Sea on a crossing from Duba, Saudi Arabia, to Safaga, Egypt. Of roughly 1,400 people aboard, 387 were rescued — including 24 crew — and the rest were lost. The reported death toll is about 1,031; because passenger accounting on the route was imperfect, the figure is best stated as approximately a thousand. The disaster was the worst Egyptian maritime loss in modern history. Its cause, as reconstructed by the flag state's investigation, was not a single failure but a chain: a fire on the vehicle deck, firefighting water that could not drain because the scuppers were blocked, that trapped water sloshing free across the deck, and ballast operations meant to correct the resulting list that instead deepened it — a compounding loss of stability aboard a ship that was, in the round, unseaworthy.

The vessel carried the design vulnerability common to RO-RO ferries: a long, open vehicle deck with no internal subdivision, on which any accumulation of free water is acutely dangerous to stability. Built in Italy in 1970 as the Boccaccio, she had over her life been lengthened and given additional passenger decks — modifications that raised weight high in the ship. By 2006 she was operating under the Panamanian flag for the Egyptian company El Salam Maritime Transport, classed and statutorily certified by the Italian classification society RINA acting on behalf of the flag state.

The Panama Maritime Authority, as flag state, conducted the official investigation, and the document of record is explicitly a preliminary report: it set out the facts and conclusions reached at that stage and expressly reserved further findings for a final report. Within those limits its reconstruction is the authoritative technical account, and it describes a multi-factor loss in the exact sense — no one of the failures alone would likely have sunk her; their sequence did.

The legal aftermath ran on two tracks. In Egypt, the ship's owner, Mamdouh Ismail, who had left the country, was acquitted in 2008 and then convicted on appeal in 2009 and sentenced in absentia to seven years, with company employees also convicted. In Italy, court-appointed experts found contributory negligence by RINA for having certified an unseaworthy ship, and the Italian and EU courts ultimately confirmed that the victims' relatives could pursue RINA in the Italian courts — a landmark on the liability of classification societies.

Timeline

1970
Built in Italy as the Boccaccio
The ferry is constructed by Italcantieri for Italian domestic service; over the following decades she is lengthened and fitted with additional passenger decks.
1999
Sold to Egypt
El Salam Maritime Transport acquires the vessel, renames her al-Salam Boccaccio 98, and places her on Red Sea service under the Panamanian flag, classed by RINA.
2 Feb 2006, evening
Departure from Duba
The ferry sails from Duba, Saudi Arabia, for Safaga, Egypt, carrying about 1,400 passengers and crew, many of them Egyptian workers returning home, along with vehicles on the car deck.
2 Feb 2006, ~2 h 20 min after sailing
Fire alarm
A fire develops on the vehicle deck and the alarm sounds; the crew begins fighting it with seawater.
Following period
Water that cannot drain
With the scuppers blocked, the firefighting water accumulates on the open vehicle deck rather than draining overboard.
Then
A list to starboard
The trapped water moves freely across the deck (the free-surface effect); combined with weather, the ship takes on an increasing list to starboard.
Then
Ballast worsens it
The master orders ballast operations to correct the heel; instead, with ballast water leaking into the garage space, the list deepens.
2 Feb, ~late / 3 Feb early
The master turns back
Some 60–80 km from Safaga the master attempts a roughly 180-degree turn; the capsize occurs as the ship comes around.
3 Feb 2006, ~01:33 local
Capsize and sinking
The al-Salam Boccaccio 98 rolls over and sinks in the Red Sea; 387 of about 1,400 aboard are rescued, with a reported death toll near 1,031.
2006–2008
Panama's investigation
The Panama Maritime Authority, as flag state, investigates and issues its preliminary report on the sinking.
2008–2009
Egyptian verdicts
Owner Mamdouh Ismail is acquitted in 2008, then convicted on appeal and sentenced in absentia in 2009 to seven years; company employees are also convicted.
2020
Italy / EU on RINA
Italian and EU courts confirm that the victims' relatives may sue the classification society RINA in Italy; court-appointed experts had found RINA contributorily negligent.

The Ship and the Crossing

The al-Salam Boccaccio 98 was a roll-on/roll-off passenger ferry — a vessel type defined by its great, undivided vehicle deck running much of the ship's length. That deck is what makes a RO-RO efficient and what makes her dangerous: there are no transverse bulkheads to contain water that gets onto it, so any pooled liquid is free to surge from side to side as the ship rolls. The phenomenon is the free-surface effect, and naval architects treat a flooded RO-RO deck as one of the most stability-critical conditions a ship can be in — the design lineage the Herald of Free Enterprise and the Estonia had already written into maritime memory.

The Boccaccio had been built in Italy in 1970 for domestic service and, over a long career, lengthened and given extra passenger decks — modifications that added weight high in the ship and changed the vessel the original designers had drawn. By 2006 she was on the Red Sea run for El Salam Maritime Transport, sailing under the flag of Panama with her statutory certificates issued by the Italian classification society RINA, the flag state's recognised organisation. On the night of 2 February she left Duba for Safaga with roughly 1,400 aboard and vehicles on the car deck, a route heavily used by Egyptian workers travelling between the two countries.

In good order a RO-RO on a short sea crossing is an unremarkable workhorse, and the margin that keeps her safe is the integrity of that vehicle deck: kept dry and drained, it poses no stability threat. The events of that night attacked exactly that margin.

The Fire and the Capsize

About two hours and twenty minutes after departure, a fire broke out on the vehicle deck and the alarm sounded. The crew turned seawater on the blaze. In normal operation that water would run off the deck through scuppers — drains in the deck edge that return it to the sea. On this night the scuppers were blocked, and the firefighting water had nowhere to go. It pooled on the open vehicle deck and began to build.

That pooled water was the hinge of the disaster. As the ship moved in the seaway, the trapped water surged across the undivided deck, and the free-surface effect ate into her stability. The vessel began to list to starboard. The master, attempting to correct the heel, ordered ballast operations; but ballast water was leaking into the garage space, and rather than righting the ship the manoeuvre deepened the list. He then attempted to turn back toward Saudi Arabia, beginning a roughly 180-degree turn some 60 to 80 kilometres from Safaga. A turn induces its own heeling moment, and as the ship came around the accumulated instability ran away from her. She capsized and sank at about half past one in the morning, local time, on 3 February 2006.

Survival depended almost entirely on getting clear of the hull before she rolled. Of roughly 1,400 aboard, 387 were rescued, 24 of them crew; the reported death toll is about 1,031, a figure stated here as approximately a thousand given the usual uncertainty in mass ferry losses. The rescue was slow to mobilise and complicated by weather, and survivors described a chaotic, under-led emergency aboard a ship that gave them little time and little guidance.

Two points of sourcing deserve precision. Some accounts place the origin of the fire in the engine room rather than on the vehicle deck; the dominant reconstruction, consistent with the lethal mechanism, is a fire whose firefighting water accumulated on the vehicle deck. And the official flag-state document is, by its own terms, a preliminary report: it stated the facts and conclusions reached at that stage and reserved further findings for a final report. The mechanism it describes — fire, undrained firefighting water, free-surface instability, counterproductive ballast, capsize — is nonetheless the authoritative technical account of how she was lost.

The Investigations and the Verdicts

As the vessel's flag state, the Panama Maritime Authority held responsibility for the official casualty investigation, and its preliminary report is the document of record. Its conclusion is properly read as multi-factor. The proximate trigger was the vehicle-deck fire; the decisive escalation was firefighting water trapped by blocked scuppers, generating free-surface instability; the ballast operations meant to recover the list instead worsened it as water leaked into the garage; and underlying all of it was a ship that was, in her modified and maintained state, unseaworthy for the conditions she met. No single failure, isolated, would obviously have sunk her; their combination did, which is precisely what "multi-factor" denotes.

The criminal accountability fell in Egypt. The owner, Mamdouh Ismail, had left the country; an Egyptian court acquitted him in 2008, a verdict that provoked public anger, and on appeal he was convicted and sentenced in absentia in 2009 to seven years, with company employees also convicted. The proceedings centred on the operator's conduct — the condition of the ship, the safety regime, the response to a foreseeable car-deck fire on a RO-RO.

The most consequential legal thread, however, ran through Italy and reached beyond this one ship. Because RINA, an Italian classification society, had classed the vessel and issued her statutory certificates on the flag state's behalf, the victims' relatives sued RINA in the Italian courts. Court-appointed experts found that RINA had acted with contributory negligence in certifying an unseaworthy ship despite evident risks. RINA argued it was shielded by the sovereign immunity of the flag state for whom it acted; the Italian Supreme Court, after a reference to the Court of Justice of the European Union (Case C-641/18), confirmed in 2020 that classification and certification of this kind is not an exercise of sovereign power and that the Italian courts had jurisdiction to hear the claim. The ruling established that a classification society can be held to account in court for negligent certification — a structural consequence reaching far past the al-Salam Boccaccio 98.

The Five Factors

01
The RO-RO open deck
The vessel's stability hinged on a long, undivided vehicle deck with no subdivision to contain water. Any liquid on that deck is free to surge as the ship rolls, attacking stability through the free-surface effect. It is the same design vulnerability that sank the Herald of Free Enterprise and the Estonia, and it makes a flooded car deck one of the most dangerous conditions in naval architecture.
02
Scuppers that did not drain
Firefighting water that should have run overboard through the scuppers instead pooled on the vehicle deck because the scuppers were blocked. A firefighting system and a drainage system are a matched pair; water applied to a fire must have a guaranteed path off the ship, or the cure becomes the cause. Blocked drainage turned a contained fire into a stability emergency.
03
Ballast action that worsened the list
The master's attempt to correct the starboard heel with ballast deepened it, as ballast water leaked into the garage. Stability recovery on a listing ship is a high-skill manoeuvre that compounds the problem if the water ends up where it adds free surface rather than righting moment. Emergency stability management demands training and accurate knowledge of where the water actually goes.
04
A modified, unseaworthy ship
Built in 1970 and later lengthened with added passenger decks, the vessel carried weight high and was, in her maintained state, unseaworthy for the demands placed on her. Modifications that change a ship from her design must be matched by a fresh stability and seaworthiness assessment; accumulated changes that erode the safety margin stay invisible until the day they are tested.
05
Certification that did not catch the risk
The ship sailed with statutory certificates from a classification society that Italian experts later found contributorily negligent. Certification is how a flag state and the travelling public are assured a vessel is fit; when the certifier misses evident risks, the assurance is hollow and the failure propagates to everyone who relied on it.

Aftermath

The al-Salam Boccaccio 98 remains the worst maritime disaster in modern Egyptian history and a standing case study in RO-RO ferry safety. Its mechanism — a vehicle-deck fire whose firefighting water could not drain, free-surface instability, and a botched ballast correction — reads as a near-textbook chain, each link individually recoverable and collectively fatal. The flag-state finding, preliminary though it was, framed the loss as multi-factor and unseaworthy, and that framing has held.

The Egyptian prosecutions delivered a conviction of the owner in absentia, but for many families the more durable outcome was the Italian litigation. By confirming that RINA could be sued in Italy for its classification and certification work, the Italian and EU courts narrowed the immunity that classification societies had relied on and affirmed that the bodies which certify ships fit can be answerable when they certify ones that are not. For an industry in which the certificate is the currency of trust, that is a consequence as significant as any reform aboard a single ship. The wreck lies in deep water in the Red Sea; the legal precedent it generated travels under every flag.

Lessons

  1. Pair every firefighting system with guaranteed drainage; water applied to a fire on a vehicle deck must have an assured path overboard, because trapped firefighting water on a RO-RO deck is itself a capsize hazard.
  2. Treat any free water on an undivided vehicle deck as an immediate stability emergency, and train crews in the free-surface effect that has now sunk RO-RO ferries repeatedly.
  3. Manage emergency ballast only with accurate knowledge of where the water goes; a correction that adds free surface or floods the garage will deepen the very list it was meant to cure.
  4. Re-assess seaworthiness rigorously after structural modifications; lengthening a hull and adding decks changes the ship the designers drew, and the accumulated changes can quietly consume the stability margin.
  5. Hold certifiers accountable for the assurance they sell; a classification society's stamp is only protective if missing an evident risk carries real consequence.

References