Goldsboro Broken Arrow (24 January 1961)
On 24 January 1961 a B-52 on airborne alert broke up near Goldsboro, North Carolina, and released two Mk 39 thermonuclear bombs. Official statements stressed that the weapons stayed safe—no nuclear yield, no catastrophe. Eight years later, inside Sandia, Parker F. Jones wrote a different sentence about one of those bombs: a single ready/safe switch had been the last barrier standing between the United States and a major catastrophe. That memo sat in classified channels for decades before FOIA and the press put the paper trail in front of the public.
The Fall Over North Carolina
The bomber was flying a Strategic Air Command alert orbit out of Seymour Johnson Air Force Base—part of the continuous airborne-alert posture later remembered under names like Chrome Dome. Fuel-cell and structural trouble forced an emergency approach. Control was lost. The crew ejected; three men died. Somewhere between breakup and impact, both bombs left the aircraft.
One Mk 39 came down near Faro with its parachute out—the weapon later tagged as the closer call. The other struck nearer Eureka country, a free-fall impact that tore the assembly apart. Recovery teams dug. Pieces of one weapon remained underground. Local press heard that the bombs were unarmed. The paperwork that mattered lived elsewhere.
Official Posture: Safe
The public line after a Broken Arrow is designed to close the story quickly. No nuclear detonation. Safeties worked. The arsenal did not put the country at risk. That framing is not invented for Goldsboro alone; it is the standing language of nuclear-accident management. It is also incomplete if you stop there.
Inside the laboratories, Sandia, Los Alamos, and AEC analysts treated the wreckage as a safety case. The 1961 Sandia analysis of the Mk 39 Mod 2 bombs—Document 5 in the National Security Archive's Nuclear Vault briefing book—walks through what the crash force did to arming hardware that was supposed to require human intent. The fuzing sequence started on both weapons. Lanyards and safing pins behaved in ways that alarmed the investigators. Weapon 1, the parachute bomb, landed essentially intact with its Arm/Safe switch still in SAFE—the last effective barrier that kept the high-voltage firing path from completing. Weapon 2's switch drum had been rotated toward ARMED by impact even while other damage interrupted detonation. The laboratory conclusion was not a press release. It was a parts-and-sequence autopsy.
The briefing book that collects that packet: https://nsarchive2.gwu.edu/nukevault/ebb475/. The Sandia/AEC safety analysis PDF (Doc 5): https://nsarchive2.gwu.edu/nukevault/ebb475/docs/doc%205%20AEC%20report%20Goldsboro%20accident.pdf.
Years later, Secretary of Defense Robert McNamara would be quoted describing Goldsboro as averted by the slightest margin of chance—wires that did not cross. That is the official world admitting thinness without adopting Jones's later plain speech.
The Memo: One Switch
On 22 October 1969, Parker F. Jones—supervisor of nuclear weapons safety at Sandia—answered a passage in Ralph Lapp's writing about the North Carolina accident. Lapp had popularized a six-interlock story and a yield figure that does not match Mk 39 design language. Jones corrected the folklore and then refused to soft-pedal the central point.
His memo, dryly titled along Dr. Strangelove lines—Goldsboro Revisited—concludes that one simple, dynamo-technology, low-voltage switch stood between the United States and a major catastrophe. Of the safety mechanisms on the Faro bomb, most had already been defeated by the fall and the arming sequence the breakup initiated. The residual barrier was the ready/safe switch. Jones judged the Mk 39 Mod 2 inadequate for the B-52 airborne-alert role. A stray electrical short, he warned, could credibly have thrown that last switch. "It would have been bad news—in spades."
That is the FOIA punch. Not a viral megaton meme. A Sandia safety supervisor, on paper, saying the alert configuration left one vulnerable device between routine flight and full yield.
DocumentCloud text mode of the Jones memo: https://embed.documentcloud.org/documents/796426-goldsboro-revisited-pp-1-2-copy/?embed=1&mode=text. Guardian interactive: http://www.theguardian.com/world/interactive/2013/sep/20/goldsboro-revisited-declassified-document.
How Long the Paper Stayed Quiet
The 1961 Sandia analysis was always a laboratory document, not a pamphlet for the farm fields under the fall. Jones's 1969 revisit stayed inside classified and restricted channels. For decades, public debate ran on partial accounts, Lapp's imperfect popularization, and official reassurance. Investigative work by Eric Schlosser for Command and Control, FOIA releases, and the National Security Archive's EBB 475 finally put the memo and the 1961 safety analysis where readers could cross-check them. The conspiracy flavor people smell here is not a secret cabal inventing a bomb that never fell. It is the gap between "weapons stayed safe" and a Sandia finding that safety had narrowed to one switch—and how long that gap held.
Chrome Dome Siblings
Goldsboro was not a freak one-off. It sat inside a doctrine that kept sealed-pit thermonuclear weapons airborne so a portion of the force could execute war plans without waiting on ground alert. Continuous airborne alert made accidents a percentage game, not a hypothetical.
Palomares, Spain, January 1966: a B-52 collided with a tanker; high explosive in weapons scattered plutonium; one bomb spent months underwater before recovery. Thule, Greenland, January 1968 (Crested Ice): another alert B-52 crashed on ice; weapons broke up; radioactive debris forced a major cleanup. Same family of sealed-pit bombs on alert orbits. Same diplomatic scramble afterward. Same lesson Sandia historians later spelled out: as long as fully assembled weapons fly combat-ready, absolute safety is a claim the labs would not make in an absolute sense.
Yield Without the Meme
Viral retellings still recycle a "24-megaton bomb that almost wiped North Carolina" slogan. That number comes from popular secondary writing, not from Sandia's Mk 39 Mod 2 safety papers or the NS Archive packet. The weapons were multi-megaton thermonuclear bombs—destructive enough that a full yield over the coastal plain would have been a national disaster without needing an inflated slogan. Stick to the Sandia and Archive language. The scare is in the arming sequence, not in an unsourced megaton caption.
What the Paper Trail Settles
Settled on the documents: a Broken Arrow on 24 January 1961; two Mk 39s down near Faro and Eureka; a 1961 Sandia safety analysis of the arming path; a 1969 Jones memo naming one ready/safe switch as the last effective barrier on the close-call weapon; FOIA and archival publication as the path that made that memo public. Overclaim to refuse: unsourced yield slogans and the idea that "safe" in a press statement equals "could not have gone nuclear."
The tension that remains is the one Jones left on the page. Officials said the weapons stayed safe. Sandia's own safety supervisor said one low-voltage switch said no. Chrome Dome kept flying until later accidents forced the posture to change. Goldsboro is that switch—read beside Palomares and Thule, with the FOIA packets open.
