Samsung Note 7: how schedule pressure defeated dual-sourcing strategy

The situation

In August 2016, Samsung launched the Galaxy Note 7 into a window dictated by one external event: Apple's September iPhone announcement. The strategy writes itself — get to market first, capture the premium phablet segment before the competitor keynote. The operational consequence was that every gate between design freeze and mass production got compressed to serve that date. Battery validation cycles that would normally include extended thermal cycling, abuse testing across the full design envelope, and pilot-build maturation were truncated. Two battery suppliers — Samsung SDI (Supplier A) and ATL (Supplier B) — each produced cells to fit an unusually tight internal volume within the device. The mechanical envelope left almost no tolerance for swelling, electrode movement, or tab clearance. That is a design-for-manufacturing red flag that a full APQP cycle should have forced back into engineering. Under a compressed timeline, it did not.

How it unfolded

Reports of Note 7 fires began within weeks of launch. The first recall came in September 2016 — about 2.5 million units. Samsung pointed at Supplier A's cells and shifted replacement production to Supplier B. Then replacement units from Supplier B began burning too. This is the detail that elevates the case from a supplier-quality incident to a governance failure: a second, independent supplier, supposedly the safe alternative, failed for an entirely different physical reason. A second recall followed. The FAA and equivalent regulators worldwide banned the device from commercial aircraft. By October, Samsung permanently halted production. The Note 7 was dead.

In January 2017, Samsung published findings from an investigation involving roughly 700 engineers and multiple independent labs. The transparency was genuine. The root-cause discipline was strong. But it arrived after the product was already in landfill.

Root-cause anatomy

Supplier A's failure mode was electrode deflection — the negative electrode was not properly aligned within the cell jelly-roll, allowing contact between positive and negative sides at the corner. Under charge or thermal stress, that created an internal short and thermal runaway. The defect was tied to a design that pushed cell dimensions to the edge of manufacturability, combined with insufficient validation of corner-case tolerances.

Supplier B's failure mode was entirely different. Ultrasonic welding tabs had burrs and sharp edges that pierced the insulation tape between the positive tab and the negative electrode body. Same outcome — internal short, thermal runaway. Different defect mechanism, different process step, different supplier.

Two independent physical causes. One shared systemic cause: validation gates that should have caught both modes were compressed or bypassed to hit a launch date. The dual-sourcing strategy that was supposed to provide resilience instead provided two channels for the same governance failure to reach the customer.

Dual sourcing does not diversify risk when both suppliers are held to the same shortened timeline by the same gatekeeper.

Where the quality system failed

The failure sits in APQP gate management and PFMEA adequacy. Start with the PFMEA. Cell-level thermal runaway is the most catastrophic failure mode in a lithium-ion product. If the FMEA for either supplier did not assign the highest severity and demand the highest detection-control rigor for internal short-circuit paths — electrode alignment, tab insulation, burr control — then it was a paperwork exercise. Given that two different short-circuit mechanisms escaped, the detection controls across both programmes were inadequate for the severity that thermal runaway demands.

Then the gate compression itself. Validation testing — thermal cycling over full charge–discharge envelopes, mechanical abuse testing, pilot-run maturation — operates on physics, not on calendar pressure. When you compress thermal validation windows, you do not speed up the chemistry. You stop looking before the failures emerge.

And the supplier governance angle is the one most people miss. Auditing two suppliers to the same compressed PPAP and validation schedule means you inherit both their latent process risks simultaneously. Supplier A's electrode-alignment process and Supplier B's welding process had nothing in common — except that neither received enough validation time. The governance system treated them as independent. The timeline correlated them perfectly.

What would have caught it

Three controls, had they been non-negotiable, would have changed the outcome. A PFMEA review that assigned thermal runaway its proper severity and required destructively validated detection controls — cross-sectioning, thermal imaging under abuse cycling, extended thermal soak at full charge — before any cell design left pilot. An APQP gate structure where the validation phase has a fixed minimum duration tied to the physics of the battery chemistry, not to the iPhone release calendar. And a launch-readiness review with documented sign-off confirming that both suppliers' validation data covered the full design envelope — with the authority to stop the launch, not just flag risk.

The 700-engineer investigation Samsung eventually assembled was exemplary root-cause work. That same rigor applied before launch, through gates that could not be overridden by market timing, would have cost weeks. Instead it cost billions.

My take

I run supplier quality and launch governance in aerospace manufacturing. The rule on my programmes is simple: launch pressure never buys a waiver on validation gates. Easy to say in a slide deck. Brutally hard to hold when a programme director is standing in your office explaining the commercial impact of a four-week delay. I have held that line. It cost relationships. It did not cost aircraft.

The Note 7 resonates because I have lived the quieter version — a compressed launch where two suppliers' latent defects surfaced simultaneously during ramp-up, not because the suppliers were bad but because both were pushed through the same shortened PPAP cycle. We caught ours in pilot, not in customers' hands, because the gate held. In my current environment, 50% fewer EASA audit findings in one cycle and a 97% reduction in internal lead time came from precisely that discipline — gates that are immovable, PFMEAs that reflect severity honestly, supplier governance that does not correlate risk by compressing everyone's timeline to the same impossible date.

Samsung's post-failure investigation was textbook. The lesson is that textbook investigations after a $5 billion loss are not a quality system. They are an autopsy.

The Note 7 did not fail because lithium-ion batteries are inherently dangerous. It failed because a governance system designed to validate them was overruled by a calendar. Two suppliers, two failure modes, one compromised validation window — and a product line that never recovered. The chemistry was manageable. The schedule was not, because no one with the right authority made it stop.