Leaked recordings reveal final moments before the Spanish train disaster

The Urda crash happened when a Renfe AVE high-speed train collided with the rear of an Iryo train on the same line. The crash killed at least 69 people. The central issue was how a train moving at high speed came to approach another train that was still stopped ahead.

The LZB signalling system failed, bringing eight trains to a halt as a safety precaution. Control then reverted to manual instructions. Leaked recordings suggest Madrid control told the Renfe driver to resume normal operations, allowing speeds of up to 200km/h. The Iryo driver reported that her train could not restart LZB and remained stopped near the Urda entrance signal.

At 8.48am, the controller told the Iryo driver to begin moving when possible and call if there was a problem. The Renfe train had begun accelerating at 8.36am. It struck the stationary Iryo train at 8.53am. The recordings remain leaked material, and a full investigation was still needed.

LZB is an automated signalling and control system used on Spain’s Madrid-to-Seville high-speed line. The article says it is also used in Germany and Austria. Its job is to monitor train speeds and relay traffic instructions. That information helps controllers and drivers regulate movement and maintain safe spacing between trains.

The system works by providing a controlled picture of train movement and speed. If that picture is disrupted, trains should not continue as though conditions were normal. In this case, the LZB system experienced a disruption at the Madrid control centre. Eight trains then stopped, which the article describes as a standard safety precaution.

The danger emerged after operations reverted to manual control. Leaked recordings suggest the Renfe driver was told to resume normal operations, potentially permitting speeds up to 200km/h. The article does not establish every technical detail of LZB, but it highlights the importance of reliable automatic protection during an outage.

The crash killed at least 69 people, making it one of the article’s central measures of the disaster’s scale. The signalling failure affected eight trains along the Madrid-to-Seville high-speed line. Those trains stopped because the automated system could no longer provide reliable control, described in the article as a standard safety precaution.

The article identifies two operators involved in the collision. Renfe, Spain’s state-owned railway company, operated the high-speed AVE train. Iryo, a private operator, ran the other train. The AVE was accelerating after receiving instructions to resume normal operations, while the Iryo train remained stationary after its LZB restart failed.

The article does not state how widely Spain’s high-speed rail system is used. It gives no passenger totals, route count, or national usage figures. It does establish that the affected line runs from Madrid to Seville and that LZB is used on that high-speed route.

The automated signalling failure changed the railway from system-managed movement to human-directed movement. Eight trains first stopped, following the normal safety response to a disruption. Control then reverted to manual operations, meaning controllers and drivers had to communicate instructions and manage train movement without the same automated protection.

Leaked recordings suggest the Madrid controller told the Renfe AVE driver to resume normal operations. The driver checked the instruction, and the controller confirmed it. “Normal operations” could mean speeds up to 200km/h, rather than the more cautious 40km/h used during a signal outage. The Renfe train began accelerating at 8.36am.

Meanwhile, the Iryo driver reported that the LZB system would not restart and that her train remained stopped before the Urda entrance signal. The controller told her to start moving when possible and call if there was a problem. Five minutes later, the Renfe train hit the stationary Iryo train. The recordings are contested leaks, not official testimony.

The Madrid control centre managed train movements after the LZB failure. According to leaked recordings, it told the Renfe AVE driver to resume normal operations and confirmed that instruction when questioned. It also spoke with the Iryo driver, who reported that her train could not restart the LZB system and remained stopped before the Urda entrance signal.

The Renfe driver acted on the instruction and began accelerating at 8.36am. The article says normal operations included speeds up to 200km/h, compared with 40km/h during a signal outage. The Iryo driver contacted control at 8.41am and again later, saying the system still would not restart. At 8.48am, she was told to begin moving as soon as possible and call if necessary.

The Renfe train was about 25 kilometres behind the Iryo train when it accelerated. The Iryo remained stationary, and the Renfe train struck it at 8.53am. The exact responsibility remains disputed because the recordings were leaked and political and union arguments followed.

The article does not list specific replacement measures, but railway safety practice uses fail-safe protections for this situation. The basic principle is simple: when the system cannot reliably identify train locations, it should impose the safest available condition. That normally means stopping trains or limiting them to a very low speed until movement is authorised.

Several safeguards can help. Automatic train protection can enforce a temporary low speed or stop command. A digital movement authority can prevent a driver from entering occupied track. Controllers can use track circuits or other detection systems to confirm that a section is clear. Clear radio protocols should also require every driver to acknowledge the location and status of nearby trains before normal speeds resume.

Redundant signalling and independent warnings would add another barrier if LZB fails. The Renfe train should not be able to accelerate toward a stationary Iryo train unless the system or controller verifies the route. These measures are general railway safeguards; the article does not say which were installed or missing at Urda.

Railway signalling systems are designed to fail safely because a missing signal can mean many things, including a stopped train, a broken track circuit, or a communications failure. Continuing at normal speed would risk sending a train into a section whose condition is unknown. Stopping creates time to investigate and prevents uncertainty from becoming momentum.

The Urda incident shows why this matters. When LZB failed, eight trains stopped automatically. That response treated the disruption as a safety problem. The risk arose after control reverted to manual instructions and the Renfe train was reportedly told to resume normal operations, potentially at up to 200km/h, while the Iryo train remained stopped.

Automatic stopping is therefore a protective barrier, not simply a delay. If trains cannot be stopped, systems should impose strict speed limits and require explicit permission before movement. The article raises questions about whether those protections were adequate, but it does not establish the final technical or legal cause.