Pairs with the Crisis Response Playbook — a ready-to-use strategy tool. Included with a subscription, or $1.99.
In December 2019, Boeing did the thing a furious public demands. It fired its chief executive, and it announced he would receive no severance pay. After two crashes had killed 346 people1, the man at the top would walk away with nothing. It read like accountability. It was a press release. Boeing's proxy filing, as reported by CBC News, showed Dennis Muilenburg left with roughly $62 million in accumulated compensation and pension benefits, plus vested stock options worth about $18.5 million.7 'No severance' was the headline. The other sixty-two million was the footnote.
The official story is that Boeing faced a tragic engineering failure and responded with hard, painful accountability — a fired CEO, a multi-billion-dollar settlement, a grounded fleet made right. Read the federal filings and the picture inverts. Almost every act of 'accountability' was engineered to satisfy the form of consequence while quietly minimizing its substance. The crisis response wasn't a departure from how Boeing operated. It was the same instinct that caused the crisis, applied to the apology.
The system was never supposed to exist out loud
To understand the response, you have to understand what was being responded to. The 737 MAX needed a software system called MCAS to fly safely — and 'needed' is not rhetorical. The FAA's own post-crash technical summary states plainly that without MCAS, the MAX would not have met regulatory requirements for control-force feel.3 It was structurally load-bearing to the airplane's certification, not a peripheral safety net. And yet Boeing's documented program goal, captured in an internal email cited by the Department of Transportation's Inspector General, was to keep a common type rating with the older 737 — so airlines could skip simulator training and Boeing could undercut the cost of switching.4 References to MCAS were subsequently removed from flight crew training materials.4
Sit with the contradiction. The system was essential enough that the plane couldn't be certified without it — and invisible enough that the pilots flying it were never told it existed. That is not a bug in the engineering. It is the engineering serving a commercial promise: same plane, no retraining, lower cost. The whole point of MCAS, commercially, was that nobody would have to notice it.
“The horrific culmination of a series of faulty technical assumptions by Boeing's engineers, a lack of transparency on the part of Boeing's management, and grossly insufficient oversight by the FAA.”5
This wasn't the verdict of a hostile blogger. It was the conclusion of a 245-page Congressional report. The same investigation surfaced an internal 2016 survey in which 39% of Boeing's own FAA-authorized representatives — the employees deputized to certify the company's planes on the government's behalf — reported feeling 'undue pressure' from management.5 The watchdogs were on the payroll, and a third of them already felt the squeeze.
Accountability that always stops just short
Here is the thesis, stated plainly: Boeing's crisis response was a sustained exercise in producing the appearance of consequence while preserving the reality of escape. Trace each move and the pattern holds. The CEO is 'fired with no severance' — and keeps $62 million.7 The company 'pays $2.5 billion to settle criminal charges' — but it was a deferred prosecution agreement: $243.6 million in criminal penalty, $1.77 billion in compensation to airline customers, and $500 million to crash victims' families, with the charge set to vanish after three years of good behavior.2 Boeing admitted facts; it was never convicted. Each headline carries the weight of accountability. Each underlying document carefully removes it.
| The headline | The document underneath | |
|---|---|---|
| The CEO's exit | Fired, no severance | Left with ~$62M plus ~$18.5M in vested options |
| The 2021 settlement | $2.5B for criminal charges | A deferred prosecution agreement — no conviction |
| The final outcome | Held to account in court | Non-prosecution agreement in 2025; no conviction at all |
| The disclosure | Pilots and regulators informed | MCAS cut from training; true authority not reported |
The deferred prosecution agreement is the keystone of the whole performance, because it was supposed to be the moment the law finally bit. It didn't hold. Boeing's troubles continued, and the case reopened. A 2024 guilty plea deal was put on the table — and then a federal judge rejected it in December 2024.8 By May 2025, the Department of Justice and Boeing had entered a non-prosecution agreement, effectively ending the criminal case.8 After 346 deaths, after admitting the underlying facts, after years of process, Boeing emerged with no criminal conviction at all.8 The 'settlement' that looked like the end of the story was the beginning of the escape.
How you behave inside the cleanup tells you everything
If the crashes were a one-off engineering tragedy, you'd expect the post-crash period to be defined by transparency — a company desperate to prove it had changed. Instead, the same behavior recurred during the fix. The Senate Commerce Committee, working from disclosures by more than 50 whistleblowers and 15,000 pages of documents, found that during the MAX's recertification, Boeing inappropriately influenced the FAA's human-factors simulator testing of how fast pilots would react to an MCAS failure.6 Read that again. While under global scrutiny, while two airframes lay in the ground, Boeing was still putting a thumb on the test of whether pilots could survive the exact failure that had killed them. The instinct to manage the appearance never paused — not even during the apology.
And the test that mattered most was the one that had already been quietly mis-modeled. Ethiopian investigators documented that the crew did attempt the prescribed override procedures — the runaway-stabilizer cutout the industry kept insisting was the obvious fix — but couldn't complete them, in part because at the speed they were flying the stabilizer trim wheel was physically too hard to turn by hand.9 The procedure that was supposed to save them was, in those conditions, not actually executable. The blame placed on the pilots was, in a literal sense, an attempt to relocate the consequence onto the dead.
When an organization in crisis announces a dramatic act of accountability, the move that matters is almost never the one in the headline. 'Fired with no severance' is engineered to be repeated; '$62 million retained' is engineered to be missed. The reliable tell is the gap between the legal form of consequence and its substance — a settlement that isn't a conviction, a clawback that leaves the pension untouched, a recertification that's quietly steered. A genuine reckoning produces facts that make the company look worse on inspection. A managed one produces a sentence that sounds like a reckoning and a document that isn't. Read the filing, not the press release — and treat the size of the gap between them as the real measure of whether anything changed.
Isn't this just what any company does to survive?
The fair objection is that this is uncharitable — that every large company under legal threat negotiates the best deal it can, that 'no severance' clawbacks are standard, that a deferred prosecution agreement is a normal prosecutorial tool, and that Muilenburg keeping vested compensation is just contract law, not conspiracy. All true. Boeing did not invent any of these instruments. And it's worth saying the company did real things: it grounded the fleet, paid $500 million to families2, and rebuilt MCAS to depend on more than one sensor. A defender can argue Boeing behaved exactly as the law permits at every step.
But that is precisely the indictment, not the defense. The argument isn't that Boeing broke the rules of crisis response. It's that it followed them flawlessly — and that flawless compliance still produced no convicted executive, no convicted company, and a CEO richer than most people will ever be. The strongest counter actually proves the point: when a system is built so that maximum tragedy can yield minimum accountability entirely within the rules, the company that masters the rules isn't the exception. It's the design working as intended. Boeing didn't fail the test of accountability. It revealed that the test could be passed without any.
The defining image of Boeing's crisis isn't a crash site or a Congressional hearing. It's a press release announcing a CEO fired with no severance, and a proxy filing — published weeks later, where almost no one would look — showing the same man walking away with $62 million.7 One was written for the public. One was written for the record. Boeing spent its crisis perfecting the distance between them. It learned that you can satisfy the form of consequence while keeping the substance, that an apology can be engineered like a flight-control system — load-bearing, but invisible. The lesson Boeing took from 346 deaths was not how to be accountable. It was how to look like it.
When the official story and the filing disagree
Crisis Response Playbook
A playbook for a crisis already in motion: who decides, which plays fire on which trigger, and what gets said to whom. It replaces panic and the all-hands meeting with a pre-agreed sequence each person can run alone. Blank to pre-load before a crisis hits; filled as the worked example reconstructing the plays the story's team ran — and the ones they should have.
Included with any subscription, or unlock this tool for $1.99. Get it → · See plans →
Sources
Where this comes from — the filings, records, and reporting behind it.
- 1Lion Air Flight 610 crashed on October 29, 2018, killing all 189 aboard; Ethiopian Airlines Flight 302 crashed on March 10, 2019, killing all 157 aboard — together 346 deaths attributable to MCAS malfunctions.
- 2Boeing entered a Deferred Prosecution Agreement with DOJ on January 7, 2021, paying a $243.6 million criminal penalty and $500 million to victims' families, with the criminal charge to be deferred for three years.
- 3The FAA's own primary technical summary confirms that without MCAS, the 737 MAX would not have met FAA regulatory requirements for control force feel — meaning MCAS was structurally load-bearing to certification, not a peripheral add-on.
- 4Boeing's early program goal — documented in an internal Boeing email cited by DOT OIG — was to retain a common type rating with the 737 NG to avoid simulator training requirements and minimize costs for airline customers; references to MCAS were subsequently removed from flight crew training materials.
- 5The House Transportation Committee's 245-page final report concluded the MAX crashes were 'the horrific culmination of a series of faulty technical assumptions by Boeing's engineers, a lack of transparency on the part of Boeing's management, and grossly insufficient oversight by the FAA'; a 2016 internal survey found 39% of Boeing's FAA-Authorized Representatives perceived 'undue pressure' from management.
- 6The Senate Commerce Committee's December 2020 investigation report, drawing on disclosures from more than 50 whistleblowers and 15,000 pages of documents, found that during MAX recertification testing, Boeing inappropriately influenced FAA human factors simulator testing of pilot reaction times involving an MCAS failure.
- 7Muilenburg was fired in December 2019; he received no severance pay and forfeited his 2019 bonus and unvested stock awards, but departed with approximately $62 million in accumulated compensation and pension benefits, plus vested stock options worth ~$18.5 million — figures disclosed in Boeing's own regulatory filings.
- 8On December 5, 2024, the federal court rejected the 2024 Boeing guilty plea deal. In May 2025, DOJ and Boeing entered a non-prosecution agreement, effectively ending criminal prosecution — meaning Boeing avoided a criminal conviction entirely despite admitting the underlying facts in the 2021 DPA.
- 9Ethiopian investigators found the crew did attempt the prescribed runaway-stabilizer cutout procedures but could not complete manual trim wheel rotation because strong aerodynamic forces at the aircraft's high speed made the wheel physically impossible to turn by hand.
- 10Boeing's original MCAS safety assessment documents provided to the FAA specified a maximum authority of 0.6 degrees of stabilizer movement; after flight tests the actual authority was expanded to 2.5 degrees, a change not widely communicated to FAA technical evaluators.