This Brief is an AI-generated synthesis of the public record. It may contain errors, omissions, or out-of-date information, and is not legal advice or original reporting. Verify against the primary sources before relying on it.

THE BRIEF: The Brumadinho Dam Collapse

SECTION 1 — VERDICT

The B1 tailings dam at Vale’s Córrego do Feijão mine in Brumadinho, Brazil, collapsed at 12:28 local time on 25 January 2019, releasing approximately 12.1 million cubic metres of iron‑ore tailings. The resulting mud‑tsunami buried mine facilities, homes, and a section of the Paraopeba River, killing 270 people according to the official criminal‑charge documents and 272 according to the municipal government. Eleven persons remain missing. Forensic investigation concluded that the dam failed after liquefaction of the tailings, triggered by drilling conducted on the dam. The dam had been deactivated three years earlier and had last received an on‑site regulatory inspection in 2016. A German certification firm, TÜV SÜD, had issued a stability declaration for the dam in August/September 2018, just months before the failure. The disaster followed a prior tailings‑dam collapse at the Samarco mine — a Vale‑BHP joint venture — in 2015 that killed 19 people and released 43.7 million cubic metres of waste. These basic facts are established by multiple official investigations, court records, and forensic reports, and are not disputed.

The indicators include: TÜV SÜD’s own internal emails from May and November 2018 explicitly warning that the dam would not pass liquefaction studies and that “this dam has a liquefaction problem”; the Brazilian parliamentary inquiry’s finding that TÜV SÜD issued stability certificates despite a very low safety factor and that Vale continued blasting at the mine on the very day of the collapse, contrary to TÜV SÜD’s technical prohibition; the mining regulator’s conclusion that Vale failed to report sediment in drainage water — a sign that would have required immediate notification — and that had it done so the disaster could have been avoided; the U.S. Securities and Exchange Commission’s complaint alleging that Vale manipulated audits, obtained fraudulent stability certificates, and concealed dam risks while raising over $1 billion in U.S. debt markets; prosecutors found evidence that safety reports had been fabricated for at least 10 dams, indicating systematic deception; and the documented prior history of the 2015 Mariana disaster, in which a Vale‑related entity operated an upstream dam that failed with lethal consequences, establishing that the company knew the catastrophic potential of such structures. The accumulation of contemporaneous warnings, procedural violations, and a pattern of concealment supports the inference that the disaster was not solely a technical failure but a foreseeable outcome of institutional decisions to prioritise cost and operational continuity over effective safety management. This reading cannot be proven from available public evidence. It also cannot be dismissed.

What the available record cannot establish, however, is the precise mental state of any individual executive — whether specific named officers acted with intent, with knowledge that death was certain, or merely with reckless indifference. The ongoing criminal trial may eventually resolve the question of individual criminal liability, but the public evidence at present does not allow a definitive finding that a particular person knowingly caused the disaster. Equally, the evidence does not fully disentangle the respective contributions of Vale’s operational decisions, TÜV SÜD’s flawed certification, and the mining regulator’s failure to conduct on‑site inspections after 2016, though each was a necessary part of the system that failed.

SECTION 2 — CASE SUMMARY

On 25 January 2019, shortly after noon, the B1 tailings dam at Vale’s Córrego do Feijão iron‑ore mine in the Brazilian state of Minas Gerais collapsed without warning. The dam, an upstream‑constructed structure built in 1976 and acquired by Vale in 2001, had been decommissioned for three years. Its failure released a wave of liquefied mining waste that swept through the company’s canteen, administrative buildings, a hotel, and nearby homes, ultimately reaching the Paraopeba River and affecting 26 municipalities along a stretch of some 250 to 315 kilometres.

Of the 270 dead officially recorded in the criminal charges, 254 were mine workers — both Vale employees and third‑party contractors — and 16 were residents, including two pregnant women. Identification of victims was exceptionally difficult; among 238 workers whose remains were recovered, only 66 whole bodies were found, and DNA analysis became the primary method of identification. Eleven people remained missing years after the collapse.

The disaster was the second catastrophic tailings‑dam failure connected to Vale in less than four years. In November 2015 the Fundão dam at the Samarco mine, a Vale‑BHP joint venture, collapsed, killing 19 people and polluting hundreds of kilometres of waterways. Both accidents involved upstream‑style dams that failed with lethal consequences, and both triggered extensive criminal and civil proceedings.

In the Brumadinho case, state prosecutors charged 16 individuals — 13 Vale employees and three TÜV SÜD employees — and Vale S.A. itself with intentional homicide and environmental crimes. The Federal Police concluded that the dam failed after liquefaction of the tailings, triggered by drilling on the dam. Parliamentary and regulatory inquiries found that Vale had failed to report warning signs and that TÜV SÜD had issued a stability certificate despite internal emails acknowledging a liquefaction problem. A criminal trial of the 16 defendants began in February 2026 and remains ongoing.

Parallel proceedings have unfolded in multiple jurisdictions. The Brazilian securities regulator fined a former Vale director for breach of diligence duty; the U.S. SEC sued Vale for securities fraud; collective civil actions were filed against TÜV SÜD in Germany; and a criminal complaint against TÜV SÜD was lodged with the Munich public prosecutor, which after more than six years has taken no decision on whether to bring charges.

SECTION 3 — FULL RECORD

EVIDENTIARY POSTURE

The public record is substantial but uneven. It includes official investigation reports from the Federal Police, the National Mining Agency (ANM), and the parliamentary inquiry (CPI), as well as judicial documents from the ongoing criminal trial, a securities‑regulator ruling, and a U.S. SEC complaint. A set of internal TÜV SÜD emails from 2018 has been authenticated by the BBC, providing contemporaneous evidence of foreknowledge. Several key pieces of evidence, however, remain beyond public reach: the internal Vale report referred to by Reuters has not been publicly released; the full documentation behind the CPI’s findings is not available; and the German prosecutor has released no findings after six years. The collapse itself destroyed all physical evidence of the dam’s condition at the moment of failure, so the reconstructed account depends heavily on documentary records and post‑hoc forensic modelling.

OBSERVED FACTS VS. INFERRED CLAIMS

Observed Facts (verified through multiple official sources)

• The dam collapsed on 25 January 2019.
• It was an upstream‑constructed dam that had not been in use for three years before the failure.
• The Federal Police concluded that tailings liquefied after drilling.
• TÜV SÜD issued a stability declaration in August/September 2018.
• Internal TÜV SÜD emails from May and November 2018 explicitly state that the dam had a liquefaction problem.
• Vale conducted blasting on the day of the collapse despite a TÜV SÜD prohibition.
• The ANM found that Vale failed to report sediment in drainage water.
• The CPI found that TÜV SÜD issued stability certificates despite a very low safety factor.
• Prosecutors found evidence that safety reports had been fabricated for at least 10 Vale dams in 2020.
• The Samarco dam, a Vale‑BHP joint venture, failed in 2015, killing 19 people.
• The official death toll in the criminal charges is 270; the municipal government reports 272.
• Vale’s share price dropped nearly 25% after the collapse, wiping out roughly US$19 billion in market value.
• Criminal charges for intentional homicide were filed against 16 individuals and Vale S.A..

Inferred Claims (alleged but not independently established)

• That Vale “knew the dam was unstable for 16 years” — the source is a claim without corroborating documentation.
• That an internal Vale report showed the dam breached guidelines months before the collapse — Vale disputes the interpretation.
• That Vale’s expansion proposal was “fast‑tracked” by local officials — an anonymous claim.
• That TÜV SÜD changed the certification methodology after the dam initially failed a liquefaction analysis — an investigator belief, not yet proven.
• That a specific Vale executive (Schvartsman) is seeking habeas record to avoid responsibility — asserted by an NGO, not confirmed by the court record in this record.
• That TÜV SÜD is “failing to cooperate with inquiries” — alleged by unnamed prosecutors and a lawmaker.

FIGURE INVENTORY

• Vale S.A. — owner and operator of the dam; defendant in criminal and civil proceedings. DOCUMENTED.
• TÜV SÜD — German certification firm; its Brazilian subsidiary issued the stability declaration for Dam I in 2018. DOCUMENTED.
• Fábio Schvartsman – former CEO of Vale; charged with 270 counts of intentional murder, charges reinstated by the Superior Court of Justice (STJ) in April 2026; previously stepped down after prosecutors demanded removal of top executives; absolved unanimously by the CVM of securities‑law accusations. DOCUMENTED. Living status not established.
• Gerd Peter Poppinga – former Vale Director of Ferrous and Coal; fined R$27 million by the CVM for breach of duty of diligence; had ordered the stoppage of Dam B1 in 2016 and was Chairman of Samarco during the 2015 Mariana disaster. DOCUMENTED. Living status not established.
• Makoto Namba (TÜV SÜD) – signed the stability appraisal in September 2018; temporarily arrested and later released by the STJ. DOCUMENTED. Living status not established.
• Jum Yassuda (TÜV SÜD) – released alongside Namba by the STJ. DOCUMENTED. Living status not established.
• Rodrigo Artur Gomes de Melo – Vale employee, arrested after the disaster and later released; also named in CPI report for allegedly impeding inspections. DOCUMENTED. Living status not established.
• Ricardo de Oliveira – Vale employee, arrested and released. DOCUMENTED. Living status not established.
• César Augusto Paulino Grandchamp – Vale employee, arrested and released; named in CPI report. DOCUMENTED. Living status not established.
• Lúcio Flávio Cavalli – Vale executive who stepped down; named in CPI report. DOCUMENTED. Living status not established.
• Silmar Magalhães Silva – Vale executive who stepped down; named in CPI report. DOCUMENTED. Living status not established.
• André Jum Yassuda, Cristina Heloiza da Silva Malheiros, Marilene Christina Oliveira Lopes de Assis Araújo, Joaquim Pedro de Toledo, Alexandre de Paula Campanha, Renzo Albieri Guimarães Carvalho – other individuals named in the CPI report for allegedly scheming to impede environmental inspection of Dam 1. DOCUMENTED. Living status not established.
• Avimar de Melo Barcelos – Mayor of Brumadinho; made public statements criticising Vale and TÜV SÜD. DOCUMENTED. Living.
• ANM (Agência Nacional de Mineração) — Brazilian mining regulator; last on‑site inspection of the dam in 2016. DOCUMENTED.
• CVM (Comissão de Valores Mobiliários) — Brazilian securities regulator; adjudicated the Poppinga and Schvartsman cases. DOCUMENTED.
• MPMG (Ministério Público de Minas Gerais) — state prosecutors; filed homicide charges. DOCUMENTED.
• Federal Police — conducted forensic investigation and recommended murder charges. DOCUMENTED.
• CPI (Comissão Parlamentar de Inquérito) — parliamentary inquiry that issued a final report in September 2019. DOCUMENTED.
• SEC (U.S. Securities and Exchange Commission) — filed securities fraud complaint against Vale. DOCUMENTED.
• Munich public prosecutor — received criminal complaint in October 2019; no charging decision after more than six years. DOCUMENTED.

SOURCE WEIGHTING

The most reliable sources for the core events are the institutional findings of the Federal Police, the ANM, and the CPI, each of which carried out formal investigations with access to documents and testimony that are not fully public. The Federal Police’s forensic conclusion that drilling‑induced liquefaction caused the collapse carries high weight because it is the product of a specialist investigative body. The internal TÜV SÜD emails, authenticated by the BBC, are contemporaneous records of the certifier’s awareness of the liquefaction risk and rank as primary evidence of foreknowledge. The CVM’s 2024 ruling is a formal regulatory adjudication and also carries high weight. The SEC complaint is a detailed allegation by a government agency but has not been adjudicated; its contents are treated as credible assertions, not established facts. Advocacy‑group statements, media reports of anonymous sources, and the claims of private litigants are given lower weight but are noted where they align with or diverge from the official record.

ANOMALIES

• TÜV SÜD internal contradiction (HIGH). The firm’s engineers acknowledged in email that the dam would not pass a liquefaction analysis and had a “liquefaction problem,” yet a formal stability certificate was issued a few months later. This gap between technical knowledge and certification output is the central evidentiary anomaly.

• Blasting on the day of collapse (HIGH). Vale detonated explosives on 25 January 2019, despite TÜV SÜD having recommended that blasting be prohibited as a safety measure. The convergence of prohibited activity and the dam’s failure is a strong indicator.

• Non‑reporting of warning signs (HIGH). The ANM found that Vale discovered sediment in drainage water from horizontal pipes installed in 2018, a worrying sign that should have triggered immediate reporting, yet Vale did not inform the regulator.

• ANM risk photographs (MODERATE). The ANM determined that internal photographs of the dam, taken at some point before the collapse, warranted a risk score of 10 with the wording “surgência nas áreas de jusante com carreamento de material ou com vazão crescente ou infiltração do material contido, com potencial de comprometimento da segurança da estrutura,” indicating a risk of compromising the structure’s safety.

• Absence of on‑site inspections (MODERATE). The ANM last inspected the dam in 2016, three years before the collapse, creating a regulatory gap that permitted undetected deterioration.

• Fabricated safety reports (HIGH). The 2020 discovery that safety documentation for at least 10 Vale dams had been fabricated suggests a systemic problem with dam‑safety reporting, not a one‑off failure.

• Prior Mariana disaster (HIGH as systemic indicator). The 2015 Samarco dam collapse, involving a Vale‑related entity, established a known pattern of upstream‑dam failure; the recurrence at Brumadinho indicates that lessons were not institutionally applied.

• Munich prosecutor inaction (MODERATE). A criminal complaint against TÜV SÜD was filed in October 2019; more than six years later, no decision on charges has been announced. This stands in contrast to the active Brazilian prosecution.

• Conflicting fatality numbers (LOW). The official criminal‑charge count is 270, but the municipal government and activist groups cite 272, and an academic table lists 308. The discrepancy, while small relative to the total, introduces uncertainty about the exact death toll.

• Judicial split on Schvartsman charges (MODERATE). A lower court suspended the homicide charges against the former CEO; the STJ reinstated them, and a split has since emerged on a three‑judge panel. This procedural oscillation complicates the assessment of individual accountability.

MOTIVE AND MECHANISM

Mechanism. The dam failed because the tailings underwent liquefaction, a process in which saturated, loosely compacted mining waste behaves like a liquid. The Federal Police concluded that drilling on the dam triggered the liquefaction. This immediate cause operated within a structure that had a recognised liquefaction vulnerability — one that TÜV SÜD’s engineers had identified and that the 2018 drainage‑pipe sediment should have flagged. The mechanism is therefore not solely natural: it involved human activities (drilling) and a failure to respond to known signs of danger.

Motive. Vale had a financial incentive to maintain the appearance of dam stability. In December 2018 — one month before the collapse — a meeting of the state mining council was called to consider Vale’s expansion proposal for the Córrego do Feijão mine. A disaster‑related delay would threaten that expansion. More broadly, Vale was raising capital in international debt markets; the SEC complaint asserts that the company obtained over $1 billion in U.S. debt while allegedly concealing dam risks. TÜV SÜD’s motive was reputational and commercial: losing a major Brazilian mining client would harm its certification business, and its employees recognised that the liquefaction results left the company “in a very vulnerable position”. These institutional motives do not by themselves prove intentional wrongdoing, but they provide a coherent explanation for why warning signs were not acted upon.

COMPETING THEORIES

Theory	Description	Evidence	Confidence
Pure technical accident without foreknowledge	The collapse resulted from an undetected, sudden liquefaction that no party could have anticipated, and the stability certificate was issued in good faith.	The physical nature of static liquefaction can occur without warning; TÜV SÜD maintains its cooperation with authorities.	VERY LOW — contradicted by the internal emails explicitly forecasting a liquefaction problem.
Systemic negligence without criminal intent	Vale and TÜV SÜD were grossly negligent in their safety management but lacked the specific intent required for homicide.	The CVM found a breach of diligence by one executive; Vale’s own reports show awareness of risk, but intent is not proven.	MODERATE — consistent with the documented omissions and the absence of evidence of a plan to cause death.
Solely regulatory failure	The ANM’s failure to inspect the dam after 2016, rather than corporate conduct, was the primary cause; Vale and TÜV SÜD acted within a system that tolerated inadequate oversight.	The ANM’s own admission that it last inspected in 2016; the CPI noted the absence of external checks.	LOW — does not explain the internal warnings or the blasting decision.
Corporate criminal responsibility (prosecution theory)	Vale and TÜV SÜD, through their senior employees, knowingly disregarded fatal risks and thereby caused 270 deaths, satisfying the legal standard for intentional homicide.	Indictment filed by MPMG; Federal Police recommendation; internal emails, blasting, and fabricated reports.	HIGH — rests on a strong accumulation of indicators but awaits judicial determination.

The reading that the two corporate actors bear criminal responsibility for the deaths is the most thoroughly evidenced of the unproven accounts. It is not based on a single witness or a speculative chain of events, but on a convergence of contemporaneous warnings, prohibited actions, and a documented institutional history that together point to a disaster that was foreseeable and avoidable.

The central pillar is the internal correspondence within TÜV SÜD. In May 2018, an employee wrote, “We’re finishing the studies about liquefaction of the dam B1, but everything points that it won’t pass”. A few days later, another message stated, “The results and figures leave us in a very vulnerable position”. In November 2018, an employee wrote bluntly, “This dam has a liquefaction problem”. Despite these warnings, TÜV SÜD issued a stability declaration in September 2018. The issuance of a certificate in the face of directly contradictory internal analysis is the most powerful indicator that the certification process was manipulated.

The second pillar is Vale’s operational conduct. The company conducted blasting at the mine on 25 January 2019, the day of the collapse, contrary to a technical recommendation from TÜV SÜD itself that blasting be prohibited as a safety measure. The detonation of explosives on a dam known to have a liquefaction issue — and on which drilling was later identified as the trigger — is a behaviour that, at minimum, removes any claim of passive negligence.

The third pillar is Vale’s failure to notify the regulator of warning signs. The ANM’s director stated that Vale discovered sediment in the drainage water after installing horizontal pipes in 2018, a sign that the agency considered sufficiently serious that, had it been reported, “the disaster … could have been avoided”. The deliberate withholding of this information from the authority charged with dam safety shifts the case from omission to something closer to concealment.

The fourth pillar is the pattern of prior behaviour. The 2015 Mariana dam collapse involved an upstream dam operated by a Vale‑BHP joint venture, killing 19 people. The SEC alleges that after that disaster Vale identified the Brumadinho dam as one of six critical dams requiring attention and presenting a significant liquefaction failure risk. The recurrence of a fatal tailings‑dam failure at a Vale asset, with similar advance warnings, makes it difficult to explain the Brumadinho collapse as an unforeseeable accident.

Additional weight is added by the 2020 discovery that safety reports had been fabricated for at least 10 Vale dams, which indicates that the documentation practices at the company were systematically unreliable, and by the SEC’s allegation that Vale raised over $1 billion in U.S. debt markets while misrepresenting dam safety. These elements combine to paint a picture of an institutional culture that treated safety reporting as a public‑relations and regulatory‑compliance exercise rather than a genuine protective measure.

What is missing — and what prevents this reading from being treated as established fact — is the absence of a documented admission or directive from a senior decision‑maker ordering that the dam be kept in operation despite the known risk. The internal documents reveal knowledge, but not a chain of command that explicitly accepts the risk of catastrophic failure. The ongoing criminal trial may eventually supply that link, but the public record at present does not contain it. Likewise, the respective roles of Vale and TÜV SÜD in the certification manipulation are not fully separated: it is not clear whether the certifier acted under pressure from the client, or independently sought to protect its contract.

This reading cannot be proven from available public evidence. It also cannot be dismissed.

WHAT THE EVIDENCE BEST SUPPORTS

The evidence best supports the conclusion that the Brumadinho dam collapse was a preventable disaster, rooted in systemic failures of safety oversight that included deliberate disregard of known risks. The Federal Police’s finding of drilling‑induced liquefaction, the contemporaneous TÜV SÜD emails acknowledging a liquefaction problem, the blasting on the day of collapse, Vale’s failure to report warning signs, and the prior Mariana disaster collectively establish that the institutional actors possessed the information needed to avert the tragedy and did not act on it. At a minimum, this constitutes gross negligence by both companies. Whether that negligence rises to criminal homicide — requiring either intent or reckless indifference equivalent to intent — is the central question the criminal trial must answer. The public record does not yet permit a confident finding on that question, but the accumulation of indicators strongly favours the prosecution’s theory that the conduct was more than ordinary negligence.

SECTION 4 — WHAT REMAINS UNKNOWN

• The specific chain of decision‑making inside Vale and TÜV SÜD that led to the stability certificate being issued despite the internal warnings. The record establishes awareness, but not the internal processes that converted that awareness into a clean certificate.
• Whether any individual defendant will be found to have had the mental state required for intentional homicide. The trial is ongoing and the outcome is unknown.
• The exact contribution of the blasting to the trigger, as opposed to the dam’s pre‑existing instability. The police concluded drilling caused the collapse, but the precise causal chain has not been fully modelled in public documents.
• Why the Munich public prosecutor has not decided on the criminal complaint against TÜV SÜD after more than six years, and what evidence the prosecutor has examined.
• The full extent of Vale’s internal documentation on dam risks, much of which remains confidential or protected by legal privilege, and whether additional warning signs were recorded but not disclosed.

SECTION 5 — METHODOLOGICAL NOTE

This case presents a difficulty common to industrial disasters with corporate defendants: the physical evidence was obliterated in the event, and the most revealing documents — the internal communications of the companies — are available only as fragments that emerged through leaks, parliamentary inquiries, and legal complaints. The reconstruction depends on those fragments and on the findings of official bodies, whose own access was sometimes contested. The criminal trial may eventually fill some of the gaps, but for now the record supports a strong circumstantial inference about institutional responsibility while leaving individual intent and the precise mechanics of the cover‑up unresolved. That asymmetry — a clear picture of systemic failure combined with an incomplete picture of personal culpability — makes this a case where the reader must hold a strong reading and genuine uncertainty simultaneously.