Skip to main content
Incident intelligence/SS-IR-009CASE FILE OPEN
Symbolic editorial illustration for SS-IR-009SERVANTSTACK // INCIDENT INTELLIGENCEFORENSIC IMAGE // VERIFIED FRAME
SS-IR-009 // INCIDENT REPORTReported

Uber Self-Driving Car

First Autonomous Vehicle Pedestrian Death

EXECUTIVE BRIEF

An Uber autonomous test vehicle struck and killed Elaine Herzberg, 49, as she walked her bicycle across a road in Tempe, Arizona.

AUTONOMOUS & AVIATION
FAILURE CHAINTRACE COMPLETE
  1. 01TRIGGERAn Uber autonomous test vehicle struck and killed Elaine Herzberg, 49, as she walked her bicycle across a road in…
  2. 02MACHINE ACTIONAutonomous actor
  3. 03MISSING GATEExecution gate and human override
  4. 04IMPACTPhysical safety
01 // INCIDENT SUMMARY

The short version

An Uber autonomous test vehicle struck and killed Elaine Herzberg, 49, as she walked her bicycle across a road in Tempe, Arizona.

02 // KEY FACTS

Case telemetry

INCIDENT
SS-IR-009
DATE
March 18, 2018
SYSTEM
Uber Self-Driving Car
LOCATION / SCOPE
Tempe, Arizona, USA
EVIDENCE
Reported
AI ROLE
Autonomous actor
HARM
Physical safety
SOURCES
1 cited record
03ENTRY POINT // WHAT HAPPENED

The event

An Uber autonomous test vehicle struck and killed Elaine Herzberg, 49, as she walked her bicycle across a road in Tempe, Arizona. The vehicle's sensors detected Herzberg 6 seconds before impact but the system couldn't classify what she was - alternating between "vehicle," "bicycle," and "unknown" 17 times. Each reclassification reset the prediction of her path. The system identified the need for emergency braking 1.3 seconds before impact but Uber had disabled the Volvo's factory emergency braking system to prevent "erratic behavior."

04CAUSAL TRACE // AI'S ACTUAL ROLE

What the machine did

Uber's self-driving system detected the pedestrian well in advance but could not maintain a consistent classification. The AI was designed to only track objects it could classify - and Herzberg walking a bicycle outside a crosswalk didn't fit any clean category. A human safety driver was present but was watching a video on her phone. Uber had reduced the safety team from two operators to one to cut costs.

Autonomous actorAutomation was a causal participant—not a decorative label for the system around it.
05BLAST RADIUS // CONSEQUENCES

Where the failure landed

Elaine Herzberg was killed - the first pedestrian fatality caused by an autonomous vehicle. Uber suspended all self-driving testing for 9 months. The safety driver was charged with negligent homicide. Uber paid an undisclosed settlement to Herzberg's family. The NTSB investigation revealed systemic safety culture failures at Uber's Advanced Technologies Group.

06 // EVIDENCE STATUS

Reported

Documented in the cited public record. Follow the sources for the precise evidentiary posture.

SOURCE RECORD UPDATED 2026-07-09

07 // SOURCE LEDGER

1 cited record

  1. 01
    Primary / officialNTSB Report HAR-19/03
08CONTROL FAILURE // MISSING GOVERNANCE

Execution gate and human override

The failure pattern in this case: Autonomous high-consequence action.

09INTERVENTION POINT // HUMAN IN THE MIDDLE

The moment the path could change

A trained operator receives the evidence, owns the go/no-go decision, and retains an immediate override.

AI PROPOSES→HUMAN OWNS THE DECISION→SYSTEM EXECUTES
10CONTROL DEPLOYMENT // AUTHORITYGATE

High-consequence gate · human override

AuthorityGate's framework requires that safety-critical AI systems must act on detection, not classification. The vehicle saw something in its path - that alone should trigger braking regardless of what the object is. The framework also prohibits disabling manufacturer safety systems to accommodate AI behavior, and mandates engaged human oversight that is monitored, not just assumed.

RELEVANT KEYSTONE CONTROLHuman-in-the-Loop ValidationHow high-risk actions route to a named subject-matter expert who owns the go or no-go decision.
12 // THE ALTERNATIVE

Autonomy is a design choice.

See the operating model that keeps AI useful while preserving human authority at consequential moments.

Compare AgenticAI and AugmentedAI →