Six Walls of Water Set Free: An Illustrated History of When Engineering Lost Its Argument with Gravity
San Francisquito Canyon, Los Angeles County, March 12, 1928 • Built in Two Years, Failed in Three
The St. Francis Dam was the keystone of the Los Angeles Aqueduct, designed by William Mulholland, the self-educated Irish immigrant who had built Los Angeles's water empire. Two years after completion the foundation rock — a friable schist on one abutment and a paleo-landslide on the other — failed. Twelve billion gallons of water tore down San Francisquito Canyon and across the Santa Clara Valley to the Pacific, killing at least 431 people in the night. The disaster destroyed Mulholland's career and reshaped American dam-safety law.
1855–1935 • Self-taught engineer, head of LA Bureau of Water Works
Born in Belfast, Mulholland began as a ditch tender in 1878 and rose to chief engineer of the Los Angeles Aqueduct (1913), the project that brought Owens Valley water 233 miles to the city. The St. Francis Dam was its terminal storage. Mulholland personally inspected a leak the morning of the failure and pronounced the dam safe. It collapsed at 11:57 p.m.
The dam keeper who reported the morning leak. He, his six-year-old son Coder, and his common-law wife Leona Johnson were killed within minutes of the breach. Their bodies were never recovered.
Mulholland's chief assistant who accompanied him on the morning inspection. Took over the LA Bureau of Water Works after Mulholland's resignation.
Hardest-hit downstream town. The flood reached its outskirts at ~3:00 a.m., killing roughly 100. The St. Francis Dam Disaster Memorial sits in the Mountain View Cemetery.
Survivor and historian whose 1963 book Man-Made Disaster remains the canonical account. He grew up in Santa Paula; his family escaped before the wave reached town.
The archetype of failure-by-foundation: a dam that satisfied its designer's intuition but failed at its rock contact. Future cases — Malpasset (1959), Vajont (1963), Teton (1976) — all involved geology that the designers either misread or ignored. St. Francis founded the modern principle that a dam's foundation matters as much as its concrete.
Var, France, December 2, 1959 • The World's Thinnest Arch Dam Discovers a Hidden Fault
Designed by André Coyne — the most celebrated dam designer of his generation — Malpasset was a 1.5-meter-thick double-curvature arch dam, an elegant minimum-concrete design that exploited the geometric strength of two intersecting curves. After heavy rain in late November 1959, the reservoir filled to capacity for the first time. A wedge of foliated gneiss in the left abutment slipped along a previously unknown fault. The arch lost its bearing, snapped, and 50 million cubic meters of water reached the town of Fréjus 21 minutes later. The disaster ended Coyne's life — he died nine months later at 69 — and recalibrated the world's relationship with thin-arch dams.
1891–1960 • French civil engineer, founder of Coyne et Bellier
Coyne pioneered the thin double-curvature arch dam, building 55 in France and another 15 abroad — including Tignes, Mauvoisin, and Roselend. Malpasset was, geometrically, the most efficient of all of them. The post-failure inquiry concluded that the design itself was sound; the geology had betrayed it.
Resident engineer and dam keeper killed in the breach. Found at his post in the dam house, which was swept downstream and destroyed.
Roman-era city of 30,000. The flood killed 423, devastated the western suburbs, and damaged the 2,000-year-old aqueduct and amphitheater. President de Gaulle visited within 48 hours.
French rock-mechanics pioneer who post-failure developed the "Londe wedge analysis" method, now standard for dam abutment stability assessment.
Octogenarian dean of French civil engineering who chaired the inquiry commission. His report exonerated the design and made geology, not concrete, the chief lesson.
St. Francis (1928) had warned about foundation rock; Malpasset proved the warning was generic, not local. Even a flawless arch designed by the world's leading engineer could fail if the abutment geology hid a fault. Every modern dam now requires a "failure mode and effects" review of its foundations.
Belluno, Italian Alps, October 9, 1963 • A Landslide Filled the Reservoir, Then Overtopped the Dam
The Vajont Dam itself never failed. Built by SADE (Società Adriatica di Elettricità) and at 261.6 meters the world's tallest arch dam at completion, it stood throughout the catastrophe and stands today. What failed was Mount Toc on its left flank: a 260-million-cubic-meter wedge of carbonate slope, slowly creeping along beds of clay-rich marl, slid into the full reservoir in 45 seconds. The displaced water rose 250 meters above the crest, sent a 50-million-cubic-meter wave over the dam, and obliterated the village of Longarone in the valley below. Roughly 2,000 people died. SADE engineers and government inspectors had observed the creep for years and continued to fill the reservoir.
1893–1961 • Chief engineer of SADE
Semenza had designed Vajont as the keystone of an integrated Piave hydroelectric system. After the November 1960 sliding incident at the reservoir's western flank, he commissioned a confidential study by Austrian geologist Leopold Müller. Müller's report (March 1961) identified the entire north flank of Mount Toc as a paleo-landslide. Semenza died of a heart attack months after reading it.
Journalist for the Communist daily L'Unità who wrote alarming articles in 1959–1961 about Vajont's geology. SADE sued her for libel; she was acquitted. After the disaster, her reportage became the basis for Marco Paolini's stage monologue.
Italian playwright whose 1993 monologue Il racconto del Vajont, broadcast live on RAI in October 1997 from atop the dam, was watched by 3.5 million viewers and made the disaster a national memory.
The valley town largely scoured to bedrock by the wave. Rebuilt in modernist style by Giovanni Michelucci. The new town's church, designed by Michelucci, is shaped to recall the wave that destroyed the old.
Carlo Semenza's son, a geologist who mapped the slide perimeter in 1960 and recognized the paleo-landslide. His warnings preceded Müller's by months. He spent the rest of his career documenting the case.
The unique case where the dam itself was vindicated and the engineers convicted. After Malpasset (geology), Vajont escalated to a wider lesson: that the reservoir's flanks, not just the dam's foundation, must be evaluated. Every modern reservoir study now includes paleo-landslide mapping — a discipline born from Mount Toc.
Henan, China, August 8, 1975 • Typhoon Nina Triggers a Cascade of 62 Failures
The Banqiao Dam was built in 1952–1953 by the People's Republic of China during a national push for water control. Nicknamed the "iron dam," it was designed for a 1,000-year storm. In August 1975, Typhoon Nina stalled over Henan province and dumped 1,631 millimeters of rain in three days, including 701 mm in a single 24-hour period — a 2,000-year event. Banqiao and the smaller Shimantan Dam failed within hours of each other. Their collapse triggered a cascade through the watershed: 62 dams failed in total. The official Chinese death toll, suppressed for two decades, was around 26,000 from the floods themselves and another ~145,000 from the famine and epidemic that followed. It is the deadliest dam failure in human history.
1917–? • Chinese water engineer
Chen Xing had warned in the early 1950s that Henan's dam-building program lacked sufficient sluice capacity and that simultaneous reservoir flooding was inevitable. He was politically demoted as a "right-deviationist" during the Great Leap Forward. After the disaster, he was rehabilitated and headed the rebuilding commission — a vindication 22 years late.
Chinese journalist whose 1998 essay "The World's Most Catastrophic Dam Failures" first publicly described Banqiao. Reprinted internationally as appendix to Patricia Adams's The River Dragon Has Come.
China's first female Minister of Water Resources (1975–1988). Took office days after Banqiao. Pushed dam-safety reforms; later defended the Three Gorges project against critics.
Mobilized 30,000 soldiers and dropped 12,470 tons of supplies by air to the cut-off survivor population of ~11 million. The largest emergency airdrop in PLA history.
Canadian environmental researcher whose 1998 book The River Dragon Has Come documented Banqiao for English-language readers and put the death toll into international perspective.
Vajont was a single landslide; Banqiao was a system collapse. Where St. Francis or Malpasset killed hundreds, Banqiao killed in the hundred-thousands because dozens of dams failed in cascade. It demonstrated that dam systems must be designed against simultaneous extreme events — a lesson now baked into hydrologic design standards worldwide.
Madison County, Idaho, June 5, 1976 • The Bureau of Reclamation's Worst Day
Teton Dam was built by the U.S. Bureau of Reclamation in 1972–1975 as part of the Lower Teton Project for irrigation and flood control along the Snake River. On Saturday morning, June 5, 1976 — the reservoir filling for the first time, just three weeks from completion — small wet spots appeared on the downstream face. By 7:30 a.m., they were leaks. By 11:00 they were torrents. At 11:57:30 a.m., still photographers and the Bureau's own movie cameras captured the dam giving way live as the right abutment caved into a sinkhole. The flood killed 11 people, drowned 13,000 cattle, and devastated Rexburg and Wilford, Idaho. Eleven dead is small by global standards; Teton's significance is that it was the first major U.S. dam failure to be photographed in real time, instantly debunking the Bureau's reputation for invincibility.
Founded 1902 • Hoover Dam, Grand Coulee, Glen Canyon… and Teton
The Bureau, founded under Theodore Roosevelt's 1902 Newlands Act, had built nearly every great American dam of the 20th century. Teton was its first complete failure. The General Accounting Office and an independent panel found that dispersive clays in the foundation rhyolite, combined with inadequate grouting of fissures, allowed internal erosion (piping) to undermine the embankment.
Wilford schoolteacher whose color photographs of the morning seepage and the final collapse, taken from the canyon rim with her family's still camera, became the iconic visual record.
Chair of the independent review panel. His report (December 1976) became a teaching standard in dam-safety curricula worldwide and triggered the National Dam Safety Act of 1979.
~10,000 evacuated. Most made it out before the flood arrived because police, alerted by the Bureau, drove door-to-door starting at 11:30 a.m. The two-hour warning saved hundreds of lives.
The disaster's most numerous victims. Snake River pasture stock that could not be moved in time. Their carcasses contaminated the floodplain for weeks.
If Vajont killed dam-engineering credibility in Italy, Teton killed it in the United States. The disaster ended the Bureau of Reclamation's golden age and effectively ended the era of new American mega-dams. The famous color film — played in every dam-engineering course since — brought failure home to a public that had previously trusted concrete.
Midland County, Michigan, May 19, 2020 • A 500-Year Storm in a Pandemic Spring
On May 19, 2020 — in the middle of the COVID-19 pandemic shutdown — the 96-year-old Edenville Dam in central Michigan failed during a 500-year rainfall event, sending a wall of water down the Tittabawassee River that overtopped and breached the Sanford Dam 12 miles downstream. The Federal Energy Regulatory Commission had revoked Edenville's hydroelectric license in 2018 specifically because its spillway capacity was inadequate — only half the volume required to pass the probable maximum flood. The dam's owner, Boyce Hydro, contested the order and continued to operate. No one died, thanks to a 90-minute downstream warning, but 11,000 were evacuated and downtown Midland was inundated to the second floor of the historic Dow Diamond ballpark. The case became a textbook for climate-era dam-safety failures.
2006–2020 • Lee W. Mueller, principal owner
Boyce Hydro Power LLC purchased the Edenville and three other dams in 2006. After FERC's 2018 license revocation for inadequate spillway capacity, the company filed bankruptcy days after the failure. A federal investigation faulted both Boyce's management and decades of regulatory inaction by Michigan EGLE.
The historic Great Lakes Loons ballpark and downtown Midland flooded to the second-floor mezzanine. Dow Chemical's headquarters complex sustained ~$50M in damages. The town has spent $200M+ on recovery and dam-removal redesign.
Chaired the independent forensic team. His 538-page May 2022 report identified static liquefaction of the dam's upstream slope as the failure trigger — an unexpected mechanism that has reshaped earthfill dam-safety reviews nationwide.
Filed Chapter 11 bankruptcy on July 31, 2020, ten weeks after the failure. Subsequent litigation has consolidated downstream property owners' claims; settlement has not been reached as of 2026.
State Environment, Great Lakes, and Energy department. Took over Edenville oversight after FERC's 2018 revocation. Subsequent state legislative reforms (2021) increased dam-inspection budgets sevenfold.
The 21st-century template: aging private infrastructure plus increasing 500-year storms (which arrive every 10 to 30 years now in some watersheds) plus regulatory inaction. Where the 20th-century failures were about geology or engineering judgment, Edenville is about ownership, climate, and political will — a template likely to repeat as the global stock of dams ages past its design life.
| Dam | Year | Type | Failure Mode | Deaths | Volume Released | Severity |
|---|---|---|---|---|---|---|
| St. Francis | 1928 | Concrete arch-gravity | Foundation rock failure | ~431+ | 47 million m³ | Major |
| Malpasset | 1959 | Double-curvature arch | Abutment fault wedge | 423 | 50 million m³ | Major |
| Vajont | 1963 | Arch (intact) | Reservoir landslide overtopping | ~2,000 | 50 million m³ wave | Catastrophic |
| Banqiao | 1975 | Earthfill | Storm overtopping (cascade of 62) | ~170,000+ | ~7 billion m³ total | Catastrophic |
| Teton | 1976 | Earthfill | Internal erosion / piping | 11 | 250 million m³ | Minor (deaths) |
| Edenville/Sanford | 2020 | Earthfill (twin) | Static liquefaction | 0 | ~120 million m³ | Minor (deaths) |
St. Francis, Malpasset, Vajont, and Teton all had perfectly adequate dam structures: it was the rock, soil, or surrounding slopes that gave way. The 20th-century lesson: a dam is only as strong as its foundation.
Each disaster was preceded by visible signs — leaks (St. Francis), creep (Vajont), seepage (Teton), inspection reports (Edenville). The common cause is institutional pressure to keep operating.
St. Francis, Malpasset, Vajont, and Teton all failed during or immediately after their first complete reservoir filling. Modern protocols require slow filling with extensive monitoring; these case studies are the reason.
Banqiao (no warning, ~170k dead) versus Teton (90-min warning, 11 dead) versus Edenville (advance evacuation, 0 dead). Modern dam safety lives or dies by emergency action plans and rapid notification.
St. Francis → California Dam Safety Act 1929. Malpasset → French Decree 1968. Vajont → criminal liability for engineers. Teton → National Dam Safety Act 1979. Edenville → 2021 Bipartisan Infrastructure Law allocations.
The world holds ~58,000 large dams. 25%+ are over 50 years old. Climate change is increasing extreme rainfall events. The combination predicts that 21st-century failures — like Edenville — will be more frequent than the 20th century's record suggests.
Drag to pan • Scroll to zoom • Hover for details