Archive / Incident Record
The Failure Museum
Eleven incidents. Twenty-one lives lost. Every checklist on the ISS today traces back to one of these.
Fatal Incidents
HISTORIC RECORDTwenty-one people have died in the course of human spaceflight operations. These are the five incidents that took them.
Apollo 1 — Cabin Fire
Launch Complex 34, Cape Kennedy
During a "plugs out" ground test of the Apollo command module, a spark in the pure-oxygen, pressurized cabin ignited a flash fire that consumed the interior in seconds. The inward-opening hatch could not be released against the internal pressure. The crew died before the pad crew could reach them.
The Cost
Virgil "Gus" Grissom. Edward H. White II. Roger B. Chaffee.
The Lesson
Hatch redesigned to open outward, cabin atmosphere revised, flammable materials purged, quality control overhauled. The Apollo program that reached the Moon was rebuilt from this fire.
"If we die, we want people to accept it. We are in a risky business, and we hope that if anything happens to us it will not delay the program. The conquest of space is worth the risk of life." — Gus Grissom, recorded before the accident.
Soyuz 1 — Parachute Failure
Orenburg Oblast, USSR
The first crewed Soyuz flight launched despite extensive known problems from earlier test flights that engineers had flagged and management had dismissed under schedule pressure. Once in orbit, solar panel, thermal, and guidance failures forced an emergency return. The drogue chute deployed; the main chute did not. The descent module struck the ground at terminal velocity.
The Cost
Vladimir Mikhaylovich Komarov.
The Lesson
Hardware that is not ready does not become ready because a launch date is approaching. Schedule pressure kills.
Komarov knew the vehicle was not flightworthy. He reportedly flew anyway because the backup crewman was his close friend Yuri Gagarin.
Soyuz 11 — Cabin Depressurization
Returning from Salyut 1
At the moment the orbital and descent modules separated, a pressure equalization valve jolted open at an altitude of about 168 km. The capsule vented to vacuum in under a minute. The crew, wearing only flight coveralls, asphyxiated within seconds. They remain the only humans to have died above the Kármán line.
The Cost
Georgy Dobrovolsky. Vladislav Volkov. Viktor Patsayev.
The Lesson
Pressure suits worn during launch, docking, and re-entry became mandatory — a rule still in force today.
Challenger STS-51-L
Off the coast of Cape Canaveral
A rubber O-ring seal on the right solid rocket booster failed at launch in 28°F weather. Hot gas burned through the booster casing and into the external tank. Seventy-three seconds after liftoff, the vehicle disintegrated. Engineers at Morton Thiokol had warned the night before that the O-rings were untested at that temperature. Management overruled them.
The Cost
Francis "Dick" Scobee. Michael J. Smith. Judith Resnik. Ellison Onizuka. Ronald McNair. Gregory Jarvis. Christa McAuliffe.
The Lesson
Listen to engineers. Document dissent. Never let repeated minor anomalies become a "normalized" deviation from the design spec.
"For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." — Richard Feynman, Rogers Commission appendix.
Columbia STS-107 — Wing Burn-Through
Breakup over east Texas and Louisiana
A piece of insulating foam the size of a briefcase broke off the external tank during launch and struck the leading edge of the left wing, punching a hole in the reinforced carbon-carbon thermal protection. During re-entry sixteen days later, superheated plasma entered the wing structure, burned through internal aluminum, and tore the vehicle apart over Texas. NASA had imaged the foam strike in flight. They classified it as a maintenance concern.
The Cost
Rick Husband. William McCool. Michael Anderson. Kalpana Chawla. David Brown. Laurel Clark. Ilan Ramon.
The Lesson
Look closer at "minor" damage. Use every imaging asset available. Always have a plan for the case where the vehicle cannot safely return.
The Columbia Accident Investigation Board concluded that the cultural failures at NASA were "as much a cause of the accident as the foam."
Near Misses
RECOVERED — CREW SAFEThese missions came close. In most cases, the distance between a memorial and a landing was hours of improvisation, a working backup, or a single switch thrown in time.
Apollo 13 — Service Module Explosion
200,000 miles from Earth
An oxygen tank in the service module exploded during a routine stir, crippling the command module's power, propulsion, and life support. The crew shut down the CM and moved into the Lunar Module, which was never designed for three people over four days. Mission Control built procedures in hours that normally take months. Manual sextant navigation. Improvised CO₂ scrubbers taped together from command module canisters. A cold, dehydrated survival profile. They brought them home after nearly six days.
At Stake
James Lovell. Jack Swigert. Fred Haise.
The Lesson
Survival at distance is a function of redundancy, ground-crew coordination, and the willingness to improvise inside known physical limits.
"Houston, we've had a problem here." — Jack Swigert, 55:55:20 mission elapsed time.
Mir Fire — SFOG Ignition
Kvant-1 module
A solid-fuel oxygen generator ignited into a blowtorch-scale flame that burned for roughly fourteen minutes. The fire was positioned between the crew and one of the two Soyuz lifeboats, blocking half the station's escape path. Smoke filled the modules; the crew fought the fire on respirators while preparing for a possible evacuation they could only half perform.
At Stake
Valery Korzun. Aleksandr Kaleri. Jerry Linenger. Reinhold Ewald. Vasili Tsibliyev. Aleksandr Lazutkin.
The Lesson
Escape paths must be redundant. Fire suppression must not depend on a single system, and lifeboats must not share a corridor.
Mir Collision — Progress M-34
Spektr module hull breach
A manual docking test of the unmanned Progress cargo ship went wrong. The vehicle came in too fast, struck a solar array and then punctured the hull of the Spektr module. The station began depressurizing. The crew sealed off Spektr by hand-cutting cables running through the hatch and closing the module — losing roughly half of Mir's electrical generation capacity permanently.
At Stake
Vasili Tsibliyev. Aleksandr Lazutkin. Michael Foale.
The Lesson
Do not rehearse manual procedures against critical in-flight hardware. Test on the ground; fly only what has been verified.
ISS Ammonia Coolant Leaks
External thermal control loops
The ISS has had repeated ammonia leaks from its external cooling loops — most dramatically in 2013, when a rapid leak required an unplanned contingency EVA within 48 hours, and again in 2022 from a backup radiator on the Russian segment. Ammonia is toxic inside the habitable volume, which makes every external repair a careful decontamination problem as well as a mechanical one.
At Stake
Continuous crew operations. Thermal control for the station's electronics.
The Lesson
Coolant loops are an ongoing, unglamorous, and non-optional risk for any long-duration habitat.
Soyuz MS-22 — Coolant Loop Breach
Docked at ISS Rassvet
A micrometeoroid struck the external radiator of the Soyuz MS-22 return capsule and vented its coolant entirely. The vehicle was no longer rated to carry crew safely through re-entry. Roscosmos launched an empty replacement capsule, Soyuz MS-23, and Frank Rubio's planned six-month mission stretched to 371 days — the longest single spaceflight by any American.
At Stake
Sergey Prokopyev. Dmitri Petelin. Frank Rubio.
The Lesson
Micrometeoroid and orbital debris risk is non-trivial. Every crewed habitat needs a backup return capability that is already on orbit or can be launched fast.
Apollo-Soyuz — Toxic Gas Ingress
Descent over the Pacific
During descent, the reaction control system was left active longer than the checklist called for, and a cabin pressure relief valve opened while thrusters were still firing. Nitrogen tetroxide — a highly toxic oxidizer — was drawn into the cabin. Vance Brand briefly lost consciousness. Tom Stafford reached the oxygen masks and got them on all three crewmen before splashdown. The crew spent two weeks hospitalized in Honolulu.
At Stake
Thomas Stafford. Vance Brand. Donald "Deke" Slayton.
The Lesson
Toxic propellants need failsafe isolation from the crew cabin. Procedure alone is never enough.
End of Record
Twenty-one lives lost across eleven incidents.
Six decades.
Every checklist on the ISS today exists because of one of these incidents. The patterns here, atmosphere failures, decision breakdowns, and cascading system failures, are the same ones that will threaten any long-duration mission. The question is whether we learn from them before we go further.