Toxic Gas — H2S Release
Aghorn Operating Inc. H2S Release Fatalities
Aghorn Operating, Inc.
📍 Odessa, TX
Incident: October 26, 2019 • CSB Report: May 21, 2021
2
Fatalities
—
Injuries (not stated in CSB summary)
Hydrogen Sulfide (H2S) in Produced Water
Chemical / Hazard
9
CSB Recommendations
📋 Incident Summary

On the evening of October 26, 2019, hydrogen sulfide (H2S) was released inside the pump house of an Aghorn Operating waterflood station in Odessa, Texas. An Aghorn pumper working at the station was fatally injured. His wife, who went to the facility to look for him when he did not return home, was also killed.

The pumper did not lock out Pump #1 before working on it. The pump activated automatically, and water containing H2S was released from it into the pump house. He was not wearing his personal H2S detector, and there was no evidence that Aghorn management required their use.

The CSB identified six safety issues: nonuse of the personal H2S detector, nonperformance of lockout/tagout, confinement of H2S inside the pump house, lack of a safety management program, a nonfunctioning H2S detection and alarm system, and deficient site security. The May 2021 report issued 9 recommendations: 7 to Aghorn, 1 to OSHA, and 1 to the Railroad Commission of Texas. All are closed.

🔎 Key Findings
Finding 01
Pump Not Locked Out
The pumper did not perform lockout/tagout before working on Pump #1. Aghorn had no well-documented lockout/tagout policy or procedure at the time.
Finding 02
Automatic Pump Start Released H2S
The pump activated automatically, releasing produced water containing H2S into the pump house.
Finding 03
Personal H2S Detector Not Worn
The pumper was not wearing his personal H2S detector, and there was no evidence that management required its use.
Finding 04
Fixed Detection and Alarm System Not Working
The CSB found the station's H2S detection and alarm system was not functioning to warn of the release.
Finding 05
Site Security Allowed Entry
The CSB cited deficient site security. The pumper's wife was able to enter the facility while looking for him and was fatally exposed.
🔍 Root Causes
1
No hazardous energy control
Without a lockout/tagout program, an automatic pump start could release toxic process fluid while a worker was at the equipment.
2
Layers of H2S warning missing
Neither a personal detector nor the fixed alarm system warned of the release.
3
No safety management program
Aghorn lacked a program to identify and manage H2S hazards across design, procedures, maintenance, and training.
☑ CSB Recommendations
→ Aghorn Operating (R1)
Mandate personal H2S detectors for all employees and visitors at waterflood stations where exposure at or above 10 ppm is possible.
→ Aghorn Operating (R2)
Develop a site-specific, formal lockout/tagout program meeting 29 CFR 1910.147, including procedures, training, and periodic inspections.
→ Aghorn Operating (R3)
Commission an independent analysis of each station's design, ventilation, and mitigation systems to protect workers from toxic gas releases.
→ Aghorn Operating (R4)
Develop a safety management program focused on protecting workers and non-employees from H2S, consistent with 29 CFR 1910.1000 and 1910.147.
→ Aghorn Operating (R5)
Properly maintain and configure H2S detection and alarm systems, with site-specific programs covering installation, calibration, inspection, maintenance, and training.
→ Aghorn Operating (R6)
Design H2S alarm systems with multiple, H2S-specific alerts, such as audible and visual alarms, so anyone inside the perimeter is warned.
→ Aghorn Operating (R7)
Implement a written, site-specific security program to prevent unplanned entry by non-employees, starting with locking gates on arrival and departure.
→ OSHA (R8)
Issue a safety information product addressing protection of workers from hazardous air contaminants and hazardous energy.
→ Railroad Commission of Texas (R9)
Send a Notice to Operators describing the six safety issues identified in the CSB report.

Full recommendation text and current status: CSB investigation page.

See this incident worked through four investigation methods (5-Whys, fishbone, barrier analysis, fault tree): One Incident, Four Investigation Methods →

💡 Lessons Learned
Lockout/tagout is the barrier against automatic equipment starts. Equipment that can start on its own must be isolated before anyone works on it.
A personal H2S monitor only protects the person who is wearing it.
Fixed gas detection has to be tested and maintained, or it gives false confidence.
Site security is part of process safety. Gates and access controls protect people who do not know the hazard.
SOP: Operating ProceduresTRN: TrainingMI: Mechanical IntegrityEAP: Emergency Planning
🔨 Safety Meeting Toolbox Talk
►Which equipment at our sites can start automatically?
►Is wearing a personal H2S monitor required and enforced here?
►When were our fixed H2S detectors last tested and calibrated?
►Could a family member or visitor walk into one of our facilities unchallenged?
Immediate Action Items
✓Confirm lockout/tagout procedures exist for every pump that can start automatically.
✓Bump-test personal monitors and verify fixed H2S alarms are functional.
✓Lock and post all remote site gates.
🔗 PSM Failures Behind This Incident

This incident involved breakdowns across 4 PSM-related areas (SOP · TRN · MI · EAP). Each represents a gap that process safety programs are designed to close.

Operating Procedures (SOPs)
Operators cannot reliably hold safe operating limits without clear, current, enforced procedures. Deviation from acceptable operating conditions is a direct consequence of SOP failure.
Supporting documents in our library →
Training & Operator Competency
Workers must understand process hazards — not just the steps on the page. Training records, refresher frequency, and verified competency are all OSHA PSM requirements.
Supporting documents in our library →
Mechanical Integrity (MI)
Equipment must be designed, inspected, and maintained to operate safely in its intended service. Mechanical integrity failures contributed to loss of containment here.
Supporting documents in our library →
Emergency Planning & Response
When process safety barriers fail, emergency response capability determines whether the outcome is controlled or catastrophic. Gaps in emergency preparedness amplified the consequences here.
Supporting documents in our library →
Process Safety Management Consulting & Document Library
📂
PSM Document Library
72 ready-to-deploy PSM documents covering all 14 OSHA elements — procedures, checklists, and audit templates built for facilities operating under 29 CFR 1910.119.
Browse the Library →
📊
Free PSM Health Score
Find out where your PSM program stands across all 14 OSHA elements. Our free health score surfaces your biggest gaps in under 10 minutes — no account required.
Check Your Score →
📞
Consulting Services
PHA facilitation, PSM program builds, compliance audits, and OSHA inspection support. Transparent flat-fee pricing — no retainer required to get started.
View Pricing →
📋 Explore the full incident library: All 111 CSB Case Studies →