It Rotted From the Inside

▶️ Prefer to watch? Every story’s a short video → https://www.youtube.com/@GetSafetyIntel · 📣 Got a near-miss? Share it anonymously (QR + link at the bottom).

At 5:26 on a Saturday morning, before the sun was up, a steel gas line the width of a dinner plate let go beside the Pecos River — and a wall of fire came straight up out of the ground. Twelve people asleep on the riverbank never had a chance. The pipe had passed the eye test for years; from the outside it looked fine. It had been rotting from the inside the whole time, in the one place nobody was looking. Today: the hazard you can’t see because it’s happening inside the metal, the rule written to force operators to look, and why “it looked fine” means nothing if you were looking at the wrong side of the steel.

An extended family had come down to the Pecos River to camp — twelve of them, five of them children, gathered on the bank near a bridge that carried a set of natural-gas pipelines across the water. It was a birthday weekend. They pitched near the river about 200 yards from the crossing and bedded down for the night.

At 5:26 a.m. Mountain time on Saturday, August 19, 2000, a 30-inch-diameter natural-gas transmission line — El Paso Natural Gas Company’s Line 1103, steel that had been in the ground for roughly fifty years — ruptured under the crossing. The escaping gas found an ignition source and lit. One end of the torn pipe became a flamethrower. The fire burned for 55 minutes and blew a crater about 86 feet long, 46 feet wide, and 20 feet deep. The fireball was large enough to be seen in Carlsbad, twenty miles to the north. All twelve members of the family were killed. The radiant heat was the killer — not the blast, not falling steel, the heat. It was the deadliest gas-pipeline accident in the United States since a leaking propane line killed 33 people in San Juan, Puerto Rico, in 1996.

Here’s the part that has to land, and it’s the whole reason this story matters. The National Transportation Safety Board (report PAR-03/01) found the cause wasn’t a dig-in, wasn’t an earthquake, wasn’t sabotage. It was corrosion — on the inside of the pipe. More than 70% of the wall thickness had been eaten away at the rupture point. From the outside, that pipe looked like every other length of steel on the line. The threat was on the surface you can’t see without either running a tool through the bore or cutting the pipe open, and El Paso Natural Gas’s internal-corrosion-control program simply wasn’t finding it. The company relied on a program that never actually put eyes on the inside of that segment. The metal thinned, and thinned, and nobody knew, until 5:26 on a Saturday morning it was too thin to hold.

Translate it to the floor: internal corrosion is the hazard that hides behind a clean inspection. You can walk the right-of-way. You can check the coating. You can verify the cathodic protection that fights corrosion on the outside of the pipe — and all of it can read green while the inside of the line quietly rots under a film of water and contaminants riding in the gas stream. The only ways to catch it are to look inside: run an in-line inspection tool — a “smart pig” — through the bore, or hydrostatically pressure-test the segment, or run a rigorous, well-designed direct-assessment program that digs at the spots most likely to be corroding. A “good” reading from the wrong method, or the wrong location, is worse than no reading, because it buys false confidence.

Name it and cite it. Carlsbad — together with the 1999 Bellingham, Washington gasoline-pipeline rupture that killed two ten-year-old boys and an eighteen-year-old — is the disaster that forced Congress to act. The result was the Pipeline Safety Improvement Act of 2002 (signed December 17, 2002), which in turn produced the federal Gas Transmission Pipeline Integrity Management rule — 49 CFR Part 192, Subpart O. In plain language, that rule made an operator do three things it could skip before: first, identify its “high consequence areas” — the segments where a rupture would hit people or the places they gather; second, actually assess those segments on a hard schedule, using in-line inspection, pressure testing, or direct assessment, with internal and external corrosion named as threats you must evaluate; and third, keep re-assessing on a set interval instead of assuming a line that was fine decades ago is fine today. The baseline assessments were phased in through 2007 to 2012. Every one of those requirements is an answer to the same question the family on that riverbank never got to ask: when did anyone last look inside this pipe?

That’s the “written in blood” part, in the most literal sense. The federal government’s settlement required El Paso Natural Gas to spend at least $86 million overhauling corrosion control across its entire 10,000-mile system and to pay a $15.5 million civil penalty — the first judicial settlement under the pipeline-safety law. The system got fixed because twelve people died proving it was broken.

One honest note, because this newsletter is about the worker the rule protects and I won’t dress it up. This one didn’t kill a work crew. It killed a family that had come to camp. But the failure was 100% an occupational one — a pipeline operator’s corrosion program that didn’t do its job — and the rule it produced protects two groups at once: the people who run, pig, and maintain these lines, and every person who lives, works, drives, and sleeps inside the high-consequence area around them. On a buried gas transmission line, “the public” and “the job site” are the same ground.

The Full EHS Picture

We’re Safety Intel, but this was never only an “S” story — it’s Environmental and Health at the same instant.

(E) Environmental. Let’s be straight about what this release was and wasn’t. This was natural gas — mostly methane — not crude, so there’s no record of a persistent toxic slick poisoning the Pecos the way an oil spill would. But a 30-inch transmission line venting and burning for 55 minutes is an enormous, near-instant release of methane, one of the most potent greenhouse gases there is, plus the products of that fireball dumped into the desert air at dawn. On the ground it gouged a crater and scorched the riparian corridor along the river. The honest environmental line here is: no chemical spill in the water, but a massive methane release and a burn scar on a sensitive river bank — which is exactly why the integrity rule that followed singles out segments near waterways and gathering places for extra protection.

(H) Health. The acute health toll was as brutal and immediate as it gets: twelve people dead from thermal burns, at dawn, in seconds — the radiant heat from that torn pipe reached the campsite two hundred yards away. There is no long-latency occupational-disease chapter to this one the way there is with dust or solvents; the harm was instant and total. The health lesson is the raw physics of a high-pressure gas fire — the “burn radius” of a big transmission line reaches far past the fence line, which is the entire logic behind keeping people, and awareness, out of that footprint.

One plain line ties it together: a single thinned pipe wall released a river of fire that killed a family, threw a huge slug of methane into the sky, and burned a scar into a desert riverbank. E, H, and S — all of it, out of the same corroded piece of steel.

1. Two workers killed in a Toledo plant explosion — during shift change. At about 4:50 a.m. Tuesday, August 18, two explosions tore through Brent Industries, an industrial cleaning and recycling facility on South Avenue in Toledo, Ohio, touching off a major fire. Two workers were killed — a man and a woman; family members identified one of them as Mary Allen, 64, of Toledo — and two or three others were hurt. The blast ruptured chemical tanks, toppled them, and partially collapsed the roof; nearly 100 first responders worked the scene. The cause is under investigation and it would be wrong to guess at it. So what for safety leaders: two patterns in this one are worth carrying even before any findings land. The blast happened at shift change — the transition window when the outgoing crew’s knowledge of what’s running, what’s charged, and what’s off isn’t always fully in the incoming crew’s hands — and it happened in a building full of stored reactive chemicals. Treat shift handovers as a real hazard with a real procedure, not a formality, and make sure the crew coming on knows exactly what’s in the tanks and what the emergency plan is before they’re standing next to them.

2. Chemical releases are climbing — and the CSB’s own data says so. Under the Chemical Safety Board’s accidental-release reporting program, the count of industrial accidents involving a chemical release rose from 83 in 2021 to 131 in 2025, and accidents that caused injuries or deaths climbed to 89 in 2025, up from 73 the year before (figures reported from CSB data by Chemical & Engineering News and others). So what for safety leaders: that’s the macro backdrop under stories like Toledo and the pipeline above — in the aggregate, the fundamentals of process safety are slipping, not tightening. The controls that hold the line are the unglamorous ones: mechanical integrity (actually inspecting the equipment that holds the hazard), management of change (no quiet modifications without a hazard review), written procedures for the task in front of the crew, and re-assessing on a schedule instead of trusting a reading from years ago. If your site runs anything hot, pressurized, or reactive, this is the year to re-walk your mechanical-integrity program — before it’s your release in next year’s count.

Shared blamelessly, HOP-style — the point is the lesson, not the name.

A plant’s fixed-equipment inspector had been shooting ultrasonic thickness readings on a run of process piping for years, always at the same marked test points, and the numbers were always fine. Routine. A newer inspector, walking the line with him, asked a plain question: “Why do we always measure the top and the straight runs, but never the bottom of that elbow downstream of where the process runs wet?” The lead paused, then pulled out the ladder and shot it. The wall at the low point of that elbow was down near its retirement limit — internal corrosion had been pooling and eating there for a long time, in a spot that never got measured because it wasn’t one of the marked points. They flagged it, scheduled the replacement, and it never got the chance to leak.

Here’s the blameless read, and it matters. Nobody was cutting corners. The inspector measured exactly where the program told him to, and every reading he took was genuinely good — that’s the trap. “All readings good” quietly became “the pipe is good,” when what it actually meant was “the pipe is good at the spots we happen to check.” Internal corrosion doesn’t attack evenly; it collects at low points, dead legs, and just downstream of anywhere the process turns wet or turbulent — and those are rarely where the convenient test points sit. The save didn’t come from anyone being sharper or more careful. It came from a newer set of eyes who hadn’t yet learned to trust the routine, and a lead willing to climb the ladder instead of defending the checklist. Measure where the corrosion actually goes, not just where it’s easy to reach.

Got a fail or a near-miss? Hit reply, or scan the QR below — we’ll feature it anonymously — no names, no company, no blame. Just the lesson, so the next crew doesn’t learn it the hard way.

📸 Scan to share your near-miss — 100% anonymous → https://scantoconfess.com

Pick one line, vessel, or tank on your site that holds something that can hurt people — pressure, gas, a flammable, a reactive. Ask two questions out loud with your crew. One: when did we last look at the inside of it — not the paint, not the coating, not the paperwork, but the actual metal that’s holding the hazard back? Two: if it’s thinning where we can’t see, would our inspection method and our inspection locations actually catch it — or are we measuring the easy spot and calling it good? If the honest answer to either is “we don’t really know what the inside looks like,” then you’re standing where El Paso stood. Put eyes on the inside of the steel before it puts fire on the outside.

🎬 Rather watch than read? Every Safety Intel story is a short video on YouTube → https://www.youtube.com/@GetSafetyIntel — subscribe so you never miss one. 📸 Share YOUR near-miss (100% anonymous): https://scantoconfess.com — or just scan the QR above. 📤 Forward this to a crew member who needs it today.

Please stay Safe & Hydrated!!!