Case Study
Cougar Flight 91
Cold‑Water Ditching, Escape Limits, and Why Seconds Matter
Case Study Analysis by Suraksha Marine
Case Study
1. Introduction — When Offshore Transport Became a Survival Emergency
On the morning of 12 March 2009, a Sikorsky S-92A helicopter operated by Cougar Helicopters departed St. John’s International Airport, Newfoundland and Labrador, on an offshore transport flight carrying workers to oil installations in the North Atlantic. The aircraft was registered C-GZCH and was operating as Cougar 91, also commonly referred to in public discussion as Cougar Flight 91.
There were 18 people onboard: two pilots and sixteen passengers.
For the people seated in the cabin, this was not supposed to be an emergency. It was a normal offshore flight — the kind of flight that workers take again and again as part of oil and gas operations. They wore immersion suits for the over-water journey. They had received the required pre-flight safety briefing. They were travelling to offshore installations, expecting a routine crew movement.
But roughly half an hour after departure, the flight changed.
The helicopter suffered a main gearbox oil pressure warning. The crew declared an emergency, descended, and turned back toward St. John’s. The aircraft was still offshore, still over cold water, still carrying passengers who had very little control over what was happening in the cockpit or inside the main gearbox.
About eleven minutes after the loss of main gearbox oil pressure, the helicopter struck the Atlantic Ocean. It hit the water with low speed but a high rate of descent. The fuselage was severely damaged. The emergency flotation system did not deploy. The helicopter sank rapidly in approximately 169 metres of water.
Seventeen people died. One passenger survived with serious injuries.
This case study must be taught carefully. It is not a simple “pilot error” story. It is not only a mechanical failure story. It is not only a HUET story. It is a layered offshore safety case involving maintenance, design assumptions, emergency procedures, crew decision-making, offshore survival equipment, cold-water physiology, emergency flotation, locator beacons, rescue response and the limits of human performance after impact.
For Suraksha Marine, Cougar Flight 91 is one of the most powerful case studies for explaining why offshore helicopter safety cannot be treated as a formality. The case teaches that survival offshore is built before the emergency begins — through aircraft integrity, maintenance discipline, strong procedures, modern CRM, helicopter passenger training, immersion suit fit, emergency breathing equipment, cold-water survival readiness and coordinated rescue.
The strongest training message is this:
In an offshore helicopter emergency, seconds matter — but the quality of those seconds is decided long before impact.
Incident snapshot
-
Date: 29 April 2016.
-
Operator / Flight: CHC Helikopter Service Flight 241.
-
Aircraft: Airbus Helicopters EC225LP Super Puma.
-
Mission: Personnel transfer from the Gullfaks B offshore installation to Bergen, Norway.
-
Location: The helicopter crashed near Turøy / Turøyna, Norway.
-
People onboard: 13 total — 11 passengers and 2 crew.
-
Outcome: The accident was fatal for all onboard.
-
What happened in flight: Witnesses reported an abrupt change in rotor noise followed by lateral oscillation, and data later showed that the main rotor assembly detached seconds before impact.
-
Final descent: The helicopter descended about 640 meters in roughly 11 seconds before ground impact.
-
Primary cause identified: Investigators traced the accident to a fatigue fracture in a second-stage planet gear within the main rotor gearbox epicyclic module.
-
Key safety issue: The crack is reported to have originated from a surface micro-pit and propagated beneath the surface, which meant it was not detected by existing monitoring methods.
-
Regulatory aftermath: The accident led to widespread suspension of EC225LP and AS332L2 operations, mandated inspections, and 12 safety recommendations tied to gearbox design and integrity review.
2. Setting the Scene
2.1 Newfoundland Offshore Aviation and Cold-Water Risk
TThe Newfoundland offshore environment is one of the most demanding helicopter operating environments in the world. On 12 March 2009, Cougar Helicopters Flight 91 — a Sikorsky S-92A, registration C-GZCH — departed St. John's International Airport on an offshore transport flight carrying 18 people.
The planned route included the SeaRose FPSO in the White Rose field, with the order of offshore stops amended after departure. The helicopter climbed to cruise altitude over the open North Atlantic. Approximately 30 minutes into flight, with the aircraft 55 kilometres southeast of St. John's, a critical emergency developed — and at that distance from shore, over that ocean, the margin between a manageable situation and a fatal one is measured in minutes.
A helicopter cabin feels controlled and routine. But outside, the North Atlantic in March is unforgiving.
Cold water changes survival in ways a briefing alone cannot prepare the body for:
-
Cold shock triggers an involuntary gasp on sudden immersion — if the face is underwater at that moment, the result can be immediately fatal
-
Manual dexterity fails within two to three minutes of cold-water immersion, weakening grip and impairing the precise hand actions that exit mechanisms and harness releases demand
-
Decision-making and coordination degrade faster than most people expect, well before the sensation of serious cold is fully registered
-
Survival time is compressed — the North Atlantic in March gives a person in the water minutes of effective action, not tens of minutes
-
Distance from shore extends rescue time — 55 kilometres over open water means SAR assets cannot reach a survivor instantly, making personal survival competence the first and most critical barrier.
This is precisely why HUET, sea survival training, and survival suit discipline are not procedural formalities. They are the physical preparation that keeps a person effective in the minutes that matter most.
2.2 The Aircraft, the Suits, and the Failure That Was Already Known
The Sikorsky S-92A was — and remains — one of the primary large twin-engine offshore transport helicopters used on long-range overwater crew-change missions. The 16 passengers and 2 crew aboard C-GZCH were wearing passenger transportation suit systems: immersion and survival suits designed to retain body heat, extend conscious survival time in cold water, and support buoyancy. These suits are an essential survival barrier — but only when correctly fitted, correctly sealed, and properly maintained.
A suit with an unsealed zip, a poor fit, or degraded material allows cold-water ingress and rapidly undermines the thermal protection the suit is designed to provide. The suit on the worker's back is only as effective as the discipline applied when donning it.
The helicopter's main gearbox (MGB) — the life-critical system that transmits engine power to the rotor — contained an oil filter bowl assembly secured by titanium mounting studs.
Those studs carried a known risk that had not been acted upon:
-
In 2008, a similar S-92A in Australia experienced an oil-loss event caused by the same titanium studs
-
Sikorsky had issued a service bulletin recommending replacement of the titanium studs with steel ones — issued six weeks before the Cougar 91 accident
-
The studs on C-GZCH had not been replaced
-
During the cruise flight, the studs fractured due to fatigue, the oil filter bowl partially separated, and the MGB rapidly lost all lubricating oilreddit+1
-
The crew received a red MGB OIL PRESSURE warning and turned back toward St. John's — but the gearbox was already failing faster than the available flight time to shore
-
The S-92A had previously failed its 30-minute run-dry certification test, ceasing after just 10 minutes, yet had been certified on the assumption that total oil loss was "extremely remote" — an assumption this accident invalidated
The most important lesson here is not technical — it is systemic. Unlike some aviation accidents where the failure is invisible and undetectable, the hazard on Cougar 91 was known, documented, and covered by a service bulletin that had simply not been applied. The failure that killed 17 people did not arrive without warning. It arrived because a corrective action was not completed in time.
2.3 Three Realities Every Offshore Worker Must Carry
The setting of Cougar 91 is not a background detail. It is the foundation of every lesson this case teaches.
Before discussing the emergency, the investigation, or the survival outcomes, offshore workers must understand the three compounding realities that defined this accident from the moment the helicopter departed St. John's:
-
A long overwater transit — 55 kilometres from shore over the cold North Atlantic, in an environment where a developing emergency rapidly outpaces the time available to reach safety on land
-
A cold-water survival environment — where immersion suits, HUET training, sea survival competence, and personal preparation are not optional extras but the primary barriers between cold-water immersion and death
-
A known mechanical risk that had not been corrected — demonstrating that airworthiness assurance, service bulletin compliance, and corrective action completion are safety barriers just as real, and just as life-critical, as any training certificate or survival suit
Offshore helicopter safety is not a single barrier. It is a chain — of engineering integrity, airworthiness management, crew response, passenger preparation, survival equipment, and rescue capability.
Cougar 91 is the case that shows what happens when one link in that chain — a titanium stud that should have been replaced six weeks earlier — gives way over the North Atlantic. Every link that follows depends on the one before it holding.
3. The People Involved — Crew, Passengers, Rescuers and the Offshore Community
3.1 The Flight Crew — Managing a Critical Emergency in Real Time
The two flight crew members aboard Cougar 91 faced one of the most demanding scenarios in offshore aviation: a life-critical system emergency developing rapidly over cold open water, far from shore, with time compressing by the minute. When the red MGB OIL PRESSURE warning appeared, the crew had to make a sequence of high-consequence decisions with incomplete information, under pressure, and with no room for hesitation.
The critical challenge was interpretation. A main gearbox oil pressure warning does not arrive with a label that says "total oil loss — land immediately." It arrives as a cockpit indication that must be assessed, cross-checked, and acted upon.
The crew had to work through several possibilities simultaneously:
-
Was this a sensor malfunction — a false warning from a faulty pressure transducer?
-
Was this a partial lubrication system issue — a pump problem that might stabilise?
-
Was this a genuine total oil loss — a catastrophic failure mode requiring immediate landing or ditching without delay?
-
How much time was available before the gearbox would fail structurally if it was genuine total oil loss?
-
Should they turn back to St. John's, divert to the nearest offshore installation, or ditch immediately?
The crew turned back toward St. John's. That decision was made in good faith with the information and procedures available to them at the time. But the S-92A's main gearbox — having already lost all lubricating oil through the fractured titanium studs — was failing faster than the flight time remaining to shore. The procedures in place at the time did not mandate an immediate landing following a total oil pressure loss. That gap between what the certification assumed and what the aircraft could actually survive was a system failure, not a crew failure.
For offshore safety trainees, this is a fundamental lesson in how emergency management works under pressure. The crew were not negligent. They were working within a system whose assumptions had not been adequately tested against the real failure mode their aircraft was experiencing.
3.2 The Passengers — Waiting, Trusting and Facing a Sudden Survival Situation
The sixteen passengers aboard Cougar 91 were offshore workers — engineers, technicians, and support personnel — travelling to their work locations in the Newfoundland oil fields. For them, the flight was routine until it was not. They were seated, strapped in, wearing immersion suits, and entirely dependent on the aircraft, the crew, and the survival equipment around them.
This is the position that every offshore helicopter passenger occupies on every flight. And it carries a specific set of responsibilities and vulnerabilities:
-
Passengers do not diagnose the emergency — they receive it. Their role begins when the aircraft situation changes around them, not before
-
Impact forces were severe — the helicopter struck the water with high vertical acceleration, consistent with loss of control during autorotation at low altitude. The impact itself was injurious and potentially incapacitating for many aboard
-
The flotation system did not deploy effectively — the helicopter sank shortly after impact, compressing the escape window dramatically
-
Cold water was immediate — once the aircraft entered the water, the physiological clock started. Cold shock, flooding, disorientation, and darkness all acted simultaneously
-
Survival suit performance depended on fit and condition — a correctly fitted, sealed suit extended survival time; any compromise in fit or seal reduced that window
-
Consciousness and physical capability after impact determined whether a person could attempt escape — and for many, the impact forces removed that capability entirely
Only one person survived. The survival outcome was shaped not by a failure of passenger courage or willingness, but by the combination of impact severity, flotation system failure, cold water, and the speed with which the aircraft sank. This case must never be taught as a story of passenger failure. It must be taught as a story of what happens when multiple barriers — engineering, certification, airworthiness, flotation, and impact survivability — fail before personal survival training can act.
3.3 The Rescuers — A Race Against Cold Water and Distance
The emergency response to Cougar 91 was rapid, professional, and ultimately able to save only one life — not because of inadequate effort, but because of the speed at which the cold North Atlantic, the impact forces, and the sinking aircraft closed the survival window.
A Canadian Coast Guard fixed-wing aircraft arrived in the search area and spotted two people and life rafts in the water. A rescue helicopter subsequently recovered the sole survivor. Search operations continued for the remaining occupants.
The response demonstrated both the strength of the SAR system and the brutal reality of what cold-water offshore emergencies can do even when rescue arrives quickly:
-
Distance matters — 55 kilometres from St. John's meant that even a fast SAR response involved unavoidable transit time over open water
-
Cold water does not wait for rescue — effective survival time in the North Atlantic in March is short; every minute between water entry and rescue is a minute the body is losing its capability to survive
-
Locating survivors requires visibility — life raft deployment, personal locator beacons, ELT activation, and survivor visibility all affect how quickly rescuers can find people in open water; on Cougar 91, neither the ELT nor personal locator beacons activated effectively
-
Impact forces determined who reached the water conscious — rescuers can only recover people who survived the impact and reached the surface; for many aboard, the impact itself was the decisive event
-
SAR coordination involved multiple assets — fixed-wing search aircraft, rescue helicopters, and vessel-based support all contributed to the search operation
For offshore safety professionals, the rescuers' experience carries a direct training message: emergency response capability is essential, but it operates at the end of the survival chain. Everything that happens before rescue arrives — impact survivability, flotation, escape, suit performance, personal beacon activation, and sea survival — determines whether there is anyone for the rescue team to find alive.
3.4 The Offshore Community — Trust, Loss and the Responsibility to Learn
There were 18 people aboard Cougar 91. Seventeen died. One survived. Behind each of those 18 people were families, colleagues, employers, and an offshore community whose relationship with helicopter travel was permanently changed by what happened on 12 March 2009.
The offshore community affected by Cougar 91 extended far beyond the aircraft:
-
Families lost partners, parents, children, and siblings doing a job that carries real risk — risk that they trusted was being managed by the people and systems responsible for managing it
-
Colleagues on other platforms and vessels faced the immediate reality that they were using the same aircraft type, the same gearbox design, the same operator — and asking whether the same thing could happen to them
-
The Newfoundland offshore workforce experienced the shock that follows any major fatal accident: grief, fear, loss of confidence, and the difficult question of whether trust in the system was warranted
-
Operators and regulators were confronted with a failure that had been foreseeable — a service bulletin existed, a prior incident had occurred, the titanium studs were a known risk — and had to answer why the corrective action had not been completed in time
-
The broader offshore aviation industry worldwide received a case study in what happens when certification assumptions are not tested against real failure modes and when known corrective actions are not completed urgently
For training, the offshore community's experience carries a message that goes beyond technical lessons. Offshore workers are not passive recipients of a safety system managed by others.
They are members of a community that has a legitimate right — and a professional responsibility — to ask questions about the aircraft they board, the maintenance completed on it, the service bulletins applied to it, and the assumptions behind its certification.
Trust in the offshore aviation system must be active, not passive. It must be built on transparency, verified through assurance, and maintained through continuous learning. Cougar 91 is the case that shows what blind trust — in a stud that had not been replaced, in a certification assumption that had not been tested — can cost an offshore community.
4. Timeline of Events
4.1 Phase One: Routine Departure and Offshore Climb
09:17 – 09:32 Newfoundland and Labrador Daylight Time
At 09:17, Cougar 91 departed St. John’s International Airport with 16 passengers and two flight crew. The flight was conducted under instrument flight rules and was intended to transport offshore workers to installations off Newfoundland.
The crew completed flight planning and preparation before departure. Passengers received the required safety briefing and were provided with immersion suits for the over-water flight.
For the cabin occupants, this was the familiar rhythm of offshore aviation: check-in, briefing, suit up, board, sit, strap in and fly.
At approximately 09:32, the helicopter levelled at 9,000 feet above sea level. Power was set and the flight continued offshore. There was no immediate indication to passengers that this flight would become an emergency.
Training implication:
Routine flights require serious preparation because emergencies do not announce themselves in advance. Workers must treat every briefing, every seat position and every item of survival equipment as if it may be needed on that flight.
This image shows a Sikorsky S-92A lifting off from St. John’s International Airport in Newfoundland on what appears to be a normal offshore transport flight. Passengers are seated in immersion suits, the crew is focused, and the cold North Atlantic setting reflects the everyday reality of offshore aviation in Newfoundland and Labrador.
This phase represents the calm beginning of Cougar Flight 91. The flight was carrying offshore workers toward offshore oil installations, and nothing in the departure scene suggests the severe technical emergency that would later develop over the ocean.
This image shows the tension inside the helicopter as the crew responds to a serious main gearbox oil pressure warning. The pilots are managing the aircraft, monitoring instruments, and beginning the decision to turn back toward shore, while passengers remain seated with growing concern.
This phase highlights how quickly a routine offshore flight can become a critical aviation emergency. The loss of gearbox oil pressure required immediate action, disciplined cockpit decision-making, and clear emergency handling in a remote over-water environment.
4.2 Phase Two: Main Gearbox Oil Pressure Warning and Emergency Return
09:45 – 09:52
At 09:45, the main gearbox oil pressure began to decrease. Within seconds, the cockpit received a main gearbox oil pressure caution and then a red warning, accompanied by an aural “gearbox pressure” alert. The helicopter was about 54 nautical miles from St. John’s.
The crew declared an emergency, began descent and turned back toward St. John’s. Main gearbox oil pressure dropped below 5 psi within a short period. This was a serious condition.
A main gearbox depends on oil for lubrication, cooling and protection against metal-to-metal contact. Without adequate oil, internal components can overheat, wear, seize or fail.
The crew descended and later levelled at approximately 800 feet above sea level. The crew discussed the possibility of ditching, but there was uncertainty about the nature of the fault. The main gearbox oil temperature did not behave as the crew expected if the gearbox had lost all lubrication. This contributed to the belief that the problem might involve an oil pump or sensor rather than complete oil loss.
This is one of the most important decision points in the case.
A warning is not only a light. It is a demand for interpretation. In high-consequence systems, misreading the warning can remove the last chance to choose the safest emergency profile.
Training implication:
Safety-critical warnings must be treated according to the most conservative credible failure mode. In offshore aviation, uncertainty should drive earlier protective action, not delayed action.
4.3 Phase Three: Ditching Decision, Loss of Control and High-Rate Descent
09:52 – 09:56
As the helicopter continued back toward St. John’s, the situation deteriorated. The crew advised that ditching was possible, then later that they were ditching. Shortly before water impact, the helicopter experienced control difficulties consistent with loss of tail rotor drive and increasing instability.
The crew attempted to manage the emergency descent and transition toward ditching. However, the helicopter entered a difficult autorotative situation with low rotor rpm, low airspeed, high workload and a high rate of descent.
The final descent profile did not provide the aircraft with enough energy or control margin for a survivable water landing.
Less than a minute after the crew reported they were ditching, the helicopter struck the water. It impacted in a slight right-bank, nose-high attitude, at low speed but with a high rate of descent. The impact forces severely compromised the fuselage.
This phase shows why “ditching” is not one simple action. A successful ditching requires aircraft control, correct profile, correct timing, adequate rotor energy, manageable sea conditions and sufficient structural survivability. When these factors are lost, the water impact can become a crash rather than a controlled landing on water.
Training implication:
For passengers, the final seconds may be beyond control. This is why pre-impact readiness matters: brace discipline, reference point awareness, seat harness understanding, lifejacket discipline and mental rehearsal.
This image captures the helicopter descending rapidly toward rough cold water as control problems worsen. The aircraft’s unstable attitude, rough sea below, and dark weather conditions communicate the extreme difficulty of the attempted emergency ditching.
This phase represents the final moments before impact. Despite the crew’s effort to return toward land and manage the emergency, the helicopter struck the water at high speed, turning a technical failure into a catastrophic offshore survival event.
This image shows the aftermath in the North Atlantic, with the damaged helicopter partly submerged, life rafts nearby, and rescue aircraft coordinating the search. A survivor in an immersion suit is shown isolated in harsh sea conditions, emphasizing the reality of cold-water survival.
This final phase focuses on survival, rescue coordination, and the importance of offshore emergency preparedness. Cougar Flight 91 became a major lesson for offshore aviation because it showed how equipment reliability, emergency procedures, ditching survivability, cold-water training, and rapid rescue response are all part of the same life-saving system.
4.4 Phase Four: Investigation, Fleet Grounding and Long-Term Industry Learning
After impact, the helicopter sank rapidly in approximately 169 metres of water. The emergency flotation system did not deploy because the impact forces and structural break-up made the system inoperable. Most occupants remained inside the aircraft. One passenger escaped and reached the surface with serious injuries. Another passenger was found at the surface but did not survive.
No useful emergency locator transmitter signal or personal locator beacon signal was detected from the occupants. A fixed-wing offshore patrol aircraft arrived and spotted two people and two life rafts floating on the water. A rescue helicopter later arrived and recovered the sole survivor. The survivor had been in the water for approximately one hour and twenty minutes after the accident.
This phase shows the survival gap between impact and recovery. In offshore helicopter events, escape from the airframe is only one part of survival. The worker must also float, breathe, signal, manage injuries, resist cold-water exposure and remain visible until rescue.
Training implication:
HUET must connect with sea survival. A worker must know how to escape the helicopter, but also how to survive after escape.
.
5. Critical Decisions — Where the Margins Changed
Cougar Flight 91 involved several critical decisions and system choices, some made long before the flight and some made during the emergency.
The first major decision area was component design and maintenance. The main gearbox oil filter bowl assembly was held by attachment studs. Galling and reduced preload on titanium studs contributed to fatigue cracking and eventual failure. When two studs broke in cruise flight, the main gearbox lost oil suddenly. This was not simply an isolated broken part. It reflected the importance of material selection, maintenance procedure clarity, inspection discipline, and the urgency with which known safety issues are addressed.
The second decision area was how the industry responded to previous information. Before Cougar 91, there had been an S-92A loss-of-lubricant event involving a similar area of the main gearbox oil filter bowl assembly. Safety information and maintenance changes existed, but the response did not remove all risk before the Cougar accident. This is an important organizational lesson: issuing a bulletin or revising a manual is not the same as ensuring that the risk has been fully controlled.
The third decision area was cockpit interpretation. The crew received a red main gearbox oil pressure warning, but the lack of expected temperature increase influenced their mental model. They suspected an oil pump or sensor issue and continued toward shore rather than ditching immediately. This does not mean they were careless. It means their training, procedures and system knowledge did not fully support the decisions required by this rare emergency.
The fourth decision area was emergency flight profile. After the warning, the helicopter descended but later levelled at 800 feet and continued toward St. John’s. The TSB found that this flight profile likely increased power demand and reduced the probability of successful controlled ditching. In simple training terms, the aircraft remained airborne too long after a condition that required immediate landing.
The fifth decision area was passenger survival equipment. The accident raised concerns about immersion suit fit, emergency underwater breathing apparatus, personal locator beacons, emergency flotation and occupant survival after cold-water impact. A worker’s chance of survival after water impact is influenced by equipment long before the emergency occurs.
The final decision area was rescue readiness. Offshore rescue is a system. It requires location information, launch capability, trained rescue crews, weather capability, communication and coordination. When locator signals do not transmit effectively, rescue time can increase.
The case therefore teaches that critical decisions are not only made in the cockpit. They are made in design offices, maintenance departments, training rooms, regulatory meetings, procurement decisions, operating procedures and emergency response planning.
6. Technical Failures — Main Gearbox Oil Loss and the Collapse of Control
The technical failure began in the main gearbox oil filter bowl attachment system. The S-92A main gearbox requires continuous lubrication. Oil reduces friction, removes heat and protects internal moving components. If the gearbox loses oil, mechanical damage can develop quickly.
The investigation found that galling on a titanium attachment stud prevented proper preload during installation. Preload is the clamping force that holds a fastened joint together. If preload is insufficient, the stud can experience higher cyclic loading during operation. Over time, fatigue cracks can develop.
In this accident, reduced preload contributed to fatigue cracking in one stud, followed by failure of a second stud because the remaining fasteners had to carry increased load. When two studs failed, the oil filter bowl displaced and the main gearbox lost oil suddenly.
Once the gearbox lost lubrication, the failure chain progressed. Without adequate oil, internal components were exposed to heat, wear and mechanical distress. Approximately ten minutes after the red oil pressure warning, the loss of lubricant caused catastrophic failure of the tail take-off pinion, resulting in loss of drive to the tail rotor shafts.
This mattered because the tail rotor provides yaw control. Without tail rotor drive, the helicopter becomes extremely difficult to control, especially with power applied. The crew then had to deal with a rapidly changing situation involving yaw, roll, pitch, rotor rpm, airspeed, descent rate and water impact planning.
The final phase became an autorotation problem. In autorotation, the rotor must maintain sufficient rpm and energy to provide control and cushion the landing. If rotor rpm becomes too low, the blades may lose the energy needed for a successful flare. In this accident, main rotor rpm and airspeed were below prescribed limits during the final approach to the water, and the rate of descent became excessive.
For offshore workers, the technical details can be translated simply:
-
A fastening problem allowed oil loss.
-
Oil loss damaged the gearbox system.
-
Gearbox damage led to loss of tail rotor drive.
-
Loss of tail rotor drive created control difficulty.
-
Control difficulty led to an unstable descent.
-
The helicopter struck the water too hard.
-
The aircraft broke apart and sank quickly.
This sequence matters because it shows that offshore accidents are rarely single-point stories. A small mechanical detail can become a fatal survival event if barriers do not stop the chain early.
7. Human Factors — Interpretation, Workload and Survival Behaviour
Human factors in Cougar Flight 91 are not about blaming individuals. They are about understanding how trained people make decisions under uncertainty, stress and time pressure.
The first human factor is expectation. The pilots expected that a true loss of gearbox lubrication would likely produce other signs, such as oil temperature increase, noise or vibration. Because the temperature indication remained normal, the crew considered the possibility of a sensor or pump issue. This expectation influenced their emergency diagnosis.
The second human factor is workload. The captain was flying the aircraft while also handling several pilot-not-flying tasks. This increased workload and made it harder to recognize critical cues. In high-pressure emergencies, role clarity matters. The more tasks one person carries, the greater the risk that important information will not be processed.
The third human factor is crew resource management. The first officer did identify the “land immediately” condition, but concerns about the flight profile were not fully incorporated into the captain’s decision-making. The investigation linked this to communication and decision-making breakdowns and the lack of recent, modern CRM training.
The fourth human factor is procedure design. If a checklist is ambiguous, if emergency conditions are not clearly separated from abnormal conditions, or if time-critical actions are not obvious, crews may lose precious time. In rare emergencies, procedure clarity can be a life-saving barrier.
The fifth human factor is passenger response after impact. The TSB found that the severity of impact likely rendered some passengers unconscious. Others may have remained conscious briefly but became incapacitated by impact and cold water shock, losing breath-hold ability before they could escape. This is a brutal but important training lesson: underwater escape training helps, but it does not overcome every impact scenario. Impact forces, injury and rapid sinking can overwhelm even trained people.
The sixth human factor is survival mindset. The sole survivor likely benefited from a combination of age, fitness, mental preparation, recent HUET, prior cold-water acclimatization and determination to survive. This does not mean survival was only about attitude. It means that human preparation can matter when a survivable window exists.
For trainees, the human factors lesson is clear:
-
Training must prepare people before stress begins.
-
Procedures must be clear before confusion begins.
-
Roles must be defined before workload rises.
-
Survival actions must be practiced before the body panics.
8. Emergency Response — Rescue in a Cold Ocean
After Cougar 91 struck the water, the survival problem shifted from aviation control to marine rescue. The aircraft had sunk rapidly, and only two people were seen at the surface when the first fixed-wing aircraft arrived. One was waving; another was face-down in the water.
A Cougar-operated SAR helicopter later arrived, and a rescue specialist recovered the sole survivor by hoist. Additional SAR aircraft and helicopters joined the response. Search operations continued into the following day.
The rescue response demonstrates both capability and limitation. Rescue resources can be professional, fast and committed, but they still require a survivable person to be at the surface, visible or locatable. If a person is trapped inside a rapidly sinking aircraft, if a locator beacon fails to transmit, or if cold water incapacitates them before recovery, rescue may not arrive in time.
This is why emergency response must be integrated with passenger survival preparation. The rescue system begins with notification, but the survival chain begins at the seat.
Important emergency response lessons include:
-
Locator signals must be reliable.
-
Life rafts must deploy or be accessible.
-
Survivors must be visible in sea conditions.
-
Immersion suits must slow heat loss.
-
Personal flotation must support an injured survivor.
-
Search and rescue must be ready for offshore flight periods.
-
Helicopter operators and offshore operators must coordinate response expectations.
The case also reinforces the need for medical readiness. The sole survivor had serious injuries, including aspiration of seawater and trauma. Offshore rescue does not end when a person is hoisted. It continues through airway management, hypothermia care, trauma treatment, transport, hospital care and psychological support.
9. What Went Wrong — The Failure Architecture
Cougar Flight 91 can be understood as a failure architecture, where multiple barriers weakened or failed in sequence.
The first barrier was design and material selection. Titanium studs were used in the oil filter bowl attachment. In this S-92A application, repeated oil filter changes and galling contributed to preload problems and fatigue cracking.
The second barrier was maintenance implementation. Revised maintenance procedures were intended to detect damaged studs, but they were not effectively implemented. Damaged studs were therefore not detected or replaced.
The third barrier was risk communication. The rationale and urgency behind maintenance changes were not communicated strongly enough to ensure that everyone understood the consequence of non-compliance.
The fourth barrier was certification assumption. The possibility of oil filter bowl attachment failure leading to total oil loss was not fully considered in the context of certification requirements for continued safe operation after loss of gearbox lubricant.
The fifth barrier was emergency procedure clarity. The rotorcraft flight manual procedure was ambiguous and lacked clearly defined symptoms of total oil loss versus pump or sensor malfunction. This contributed to misdiagnosis.
The sixth barrier was flight profile selection. The crew continued toward shore and levelled at low altitude rather than immediately ditching in accordance with the most conservative interpretation of the emergency. This reduced the probability of a controlled ditching.
The seventh barrier was aircraft control during the final descent. Loss of tail rotor drive, unstable autorotation, low rotor rpm, low airspeed and high descent rate produced an impact that the aircraft structure could not tolerate.
The eighth barrier was emergency flotation. The helicopter’s flotation system did not deploy because impact damage rendered the system inoperable.
The ninth barrier was underwater escape. Impact forces, rapid sinking, cold water shock and injury limited the ability of most occupants to escape.
The tenth barrier was location and rescue. No useful ELT or PLB signal was detected from the occupants, increasing the challenge of locating survivors quickly.
This failure architecture shows that the accident cannot be reduced to one mistake. It was a system event. Each barrier may have seemed separate, but together they shaped the outcome.
10. Investigation Findings — What the TSB Identified
The Transportation Safety Board of Canada identified sixteen findings as to causes and contributing factors, along with additional findings as to risk and other findings.
The investigation found that galling on a titanium attachment stud prevented correct preload during installation. The problem was worsened by repeated oil filter replacements and reuse of the original nuts. The titanium studs used in the S-92A application experienced excessive galling. Reduced preload increased cyclic loading, leading to fatigue cracking and eventual failure of two studs. The failure caused sudden loss of oil from the main gearbox.
The report also found that after a previous Australian S-92A occurrence, Sikorsky and the FAA relied on new maintenance procedures to control the risk and did not require immediate replacement of the titanium studs. Cougar Helicopters did not effectively implement the mandatory maintenance procedures in the relevant aircraft maintenance manual revision, so damaged studs were not detected or replaced.
The investigation found that ten minutes after the red main gearbox oil pressure warning, loss of lubricant caused catastrophic failure of the tail take-off pinion, resulting in loss of drive to the tail rotor shafts.
The rotorcraft flight manual procedure for main gearbox oil system failure was found to be ambiguous. It did not clearly define symptoms of massive loss of oil versus single oil pump failure. This contributed to misdiagnosis. The pilots relied on oil temperature because they expected a loss of oil to generate temperature rise, but that expectation did not lead to the correct emergency action.
The TSB also identified crew resource management issues, including excessive workload, lack of assertive communication and lack of recent modern CRM training. The selected flight profile increased risk, and the final descent became unrecoverable.
Survivability findings were equally important. The impact was severe. Some passengers were likely rendered unconscious, while others were incapacitated by impact and cold water shock before they could escape the rapidly sinking helicopter. The report also identified risks related to basic survival training standards, recurrent training intervals, passenger suit buoyancy, suit fitting, PLB standards, emergency underwater breathing apparatus, pilot helmets and emergency flotation capability.
One of the most important other findings was that the sole survivor likely lived because of a combination of age, fitness, mental preparation, recent HUET, previous cold-water acclimatization and strong will to survive.
For training providers, this finding is significant. It does not guarantee that training will save everyone.
But it does support a key training principle:
Preparation improves the chance of using the survival window when one exists.
11. Industry Changes Afterward — Procedures, Equipment and Oversight
After the accident, aviation authorities, the manufacturer, the operator and offshore regulators took several safety actions.
The FAA issued an emergency airworthiness directive requiring the removal of titanium studs that attached the main gearbox filter bowl assembly and replacement with steel studs. Later directives and revisions addressed gearbox malfunction procedures, filter bowl inspection and replacement requirements.
Rotorcraft flight manual procedures were revised to clarify main gearbox malfunction response. The revised guidance included the important message that total loss of main gearbox oil pressure may result in gearbox failure in less than ten minutes. This was critical because pilots need direct, conservative guidance when a warning gives them little time.
The TSB issued safety advisories on several issues, including pilot head protection, passenger transportation suit sizing, manual activation of the main gearbox oil bypass switch and adequacy of emergency flotation system requirements for helicopters.
Cougar Helicopters also introduced safety changes, including enhancements to its safety management system, checklist revisions, a validated descent profile for main gearbox oil pressure loss, improved life-saving equipment tracking, standardized flight crew attire and new crew flotation equipment.
The Offshore Helicopter Safety Inquiry in Newfoundland and Labrador led to wider recommendations around offshore passenger safety, first response capability, worker familiarization, personal accountability, safety culture, aviation oversight, operational requirements, pilot briefings, additional equipment, training goals and emergency response. Later implementation work included a dedicated first-response search and rescue facility with launch capability during scheduled offshore flights.
For offshore workers, the industry changes show how accident learning should work. A serious accident should not result only in a report. It should result in changed equipment, clearer procedures, better training, stronger oversight and improved emergency response.
For safety leaders, the lesson is even sharper:
If a hazard is known, but the control is weak, delayed or poorly communicated, the system has not learned yet.
12. Modern Training Lessons — What This Case Teaches Today
Cougar Flight 91 remains one of the most important modern offshore helicopter case studies because it connects aircraft technical integrity with passenger survival.
Lesson 1: Survival begins before boarding
A worker’s survival preparation begins at check-in, during the briefing, while donning the immersion suit, when identifying the exit and while mentally rehearsing the sequence. It does not begin after impact.
Lesson 2: Gearbox warnings are high-consequence events
Main gearbox oil pressure warning is not a routine abnormality. It can rapidly become a control emergency. Aviation crews need clear procedures, current training and conservative decision-making.
Lesson 3: Ditching is not always controlled
Many trainees imagine ditching as an aircraft settling calmly on water. Cougar Flight 91 shows that the impact may be violent, the fuselage may break, flotation may not deploy and the aircraft may sink rapidly.
Lesson 4: HUET must prepare workers for disorientation and injury
Real accidents may involve darkness, inversion, injury, cold shock, debris, seat damage, damaged exits, broken structures and rapid flooding. HUET must build orientation discipline, not just pool confidence.
Lesson 5: Cold water compresses time
Cold shock can disrupt breathing and decision-making. A person may have seconds to control breathing, release restraints, escape and reach the surface. EBS or CA-EBS training can extend capability, but only if the person is trained and able to use it.
Lesson 6: Survival equipment must fit and function
Immersion suits, lifejackets, spray hoods, locator lights, PLBs and breathing systems are not accessories. They are life-support tools. Fit, access, maintenance and familiarity matter.
Lesson 7: Training fades
The TSB identified risk associated with long intervals between recurrent basic survival training. Offshore workers need refreshers because survival skills degrade when not practiced.
Lesson 8: Rescue depends on visibility and location
If ELTs or PLBs do not transmit effectively, rescue is harder. Offshore workers must understand their equipment and the importance of remaining visible at the surface.
Lesson 9: CRM affects passenger survival
The quality of crew communication and decision-making in the cockpit can affect whether passengers ever reach a survivable scenario. CRM is therefore part of passenger safety.
Lesson 10: Safety culture must challenge assumptions
The assumption that oil loss would produce temperature rise, that procedures were sufficient, that known maintenance changes had controlled the risk, or that standard flotation was enough all became part of the failure architecture.
13. What Today’s Offshore Workers Must Learn
Offshore workers do not need to become helicopter engineers, but they must understand the seriousness of offshore aviation.
First, treat every helicopter flight as a high-consequence journey. Do not switch off during briefings because you have heard them before. Repetition is how survival memory is built.
Second, know your exit. Not generally — specifically. Know the nearest exit, the secondary exit, the reference point you will hold and the sequence you will follow.
Third, understand your harness. A seatbelt or restraint must be released at the correct time. Releasing too early in a submerged or inverted cabin can cause disorientation and trap the survivor.
Fourth, do not inflate your lifejacket inside the aircraft. Inflating too early can pin you against the cabin roof or prevent exit through a window.
Fifth, respect immersion suit fit. A survival suit only protects if it is correctly worn, sealed and suitable. Report fit or equipment problems before boarding.
Sixth, understand cold shock. Your first breath after cold-water immersion may be involuntary. Control your breathing as soon as possible. Use training to override panic.
Seventh, take HUET seriously. The pool exercise may feel controlled, but it trains reference points, orientation, breath discipline and exit sequence. Those are real accident survival skills.
Eighth, maintain certifications. Skills fade. Refreshers are not paperwork; they are protection against forgetting.
Ninth, support safety culture. Ask questions. Report equipment defects. Pay attention when others raise concerns. Offshore safety depends on workers who speak up before weak signals become emergencies.
Tenth, understand that survival is a system. Your personal action matters, but so do aircraft maintenance, operator standards, regulations, rescue capability and equipment performance.
The final worker lesson is simple:
You may not control the emergency, but you can control your readiness for the part of the emergency that reaches you.
%20(1).png)
14. Suraksha Marine Courses — How Training Builds the Survival Chain
14.1 BOSIET With EBS or CA-EBS
BOSIET gives new offshore workers the foundation for offshore safety. It covers offshore safety induction, helicopter safety and escape, sea survival, emergency first aid, firefighting and self-rescue. In a case like Cougar Flight 91, BOSIET helps workers understand that helicopter travel is not just transportation. It is a controlled exposure to aviation and marine risk.
The helicopter safety portion teaches passenger briefings, brace positions, seat harness use, exit awareness, lifejacket discipline and underwater escape principles. The se
a survival portion teaches what happens after escape: flotation, group survival, rescue signals, hypothermia awareness and survival priorities.
For a new offshore worker, the most important BOSIET lesson from this case is that the emergency sequence must be understood before boarding. Once the aircraft hits water, there is no time for theoretical learning.
14.2 HUET With EBS or CA-EBS
HUET is the most directly connected course for this case. Cougar Flight 91 involved water impact, rapid sinking and an underwater escape challenge. HUET trains workers to survive helicopter ditching or capsize scenarios by practicing the physical escape sequence under controlled conditions.
The course develops muscle memory for bracing, locating reference points, managing disorientation, releasing restraints, operating exits, using EBS or CA-EBS where applicable, exiting the simulator and reaching the surface safely.
This case shows why HUET must be realistic. Real emergencies may involve impact injury, cold shock, poor visibility, inversion, damaged cabin structure and panic. HUET cannot remove all risk, but it can reduce hesitation and improve the chance of using the available survival window.
14.3 FOET With EBS or CA-EBS
FOET is essential because survival skills fade. Experienced offshore workers may fly hundreds of times without an emergency. That familiarity can create dangerous confidence. FOET refreshes the knowledge and physical actions that may be needed in seconds.
Cougar Flight 91 shows why refreshers matter. The sole survivor had recent HUET, and the TSB considered recent training one of the likely factors that supported survival.
FOET helps keep emergency actions active in memory: brace, reference, wait, release, exit, surface, inflate, signal and survive.
14.4 Sea Survival Training
Sea survival training addresses the part of the emergency after escape. Cougar Flight 91 demonstrates that reaching the surface is not the end. A survivor may be injured, cold, alone, hard to see and waiting for rescue.
Sea survival training teaches lifejacket use, spray hood use, huddling, energy conservation, signalling, life raft boarding, hypothermia prevention and group survival. It also teaches workers that cold water affects breathing and movement quickly.
This is one of the most important links in the Cougar case: escape and rescue are separated by time. Sea survival training helps workers survive that gap.
14.5 Emergency First Aid
A helicopter ditching or crash may create blunt trauma, fractures, aspiration of seawater, hypothermia, shock and near-drowning injuries. Emergency First Aid prepares offshore workers and response teams to support casualties after recovery.
In this case, the survivor was seriously injured. First aid knowledge supports airway protection, breathing assessment, shock management, hypothermia care and rapid handover to medical teams. Offshore first aid is not only about minor injuries. It can be the bridge between rescue and advanced treatment.
14.6 Firefighting and Self-Rescue
Although fire was not the primary learning theme of this case, firefighting and self-rescue remain central to offshore safety. Helicopter crashes, platform events and vessel emergencies can all involve fire, smoke, blocked routes and emergency evacuation.
The self-rescue mindset is important here. Workers must understand alarms, escape routes, muster, smoke movement, personal protective equipment and controlled evacuation. The same discipline that helps a worker respond to fire also helps them respond to helicopter emergencies: stay calm, follow procedure, move with purpose, and do not improvise dangerously.
14.7 OERTM — Offshore Emergency Response Team Member
OERTM training prepares offshore response teams to act under pressure. A helicopter emergency connected to an offshore operation requires command, communication, muster, casualty handling, liaison with SAR, helideck readiness and coordination with shore.
The Cougar case shows that emergency response is not one action. It requires accurate information, fast mobilization, trained responders, clear roles and disciplined coordination. OERTM develops the team behaviours needed when multiple priorities happen at once.
14.8 Further OERTM
Further OERTM reinforces skills for experienced emergency response personnel. It helps teams maintain competence in incident command support, casualty handling, rescue operations and communication under stress.
The Cougar case is suitable for scenario-based team discussions: What information reaches the platform or onshore command? Who activates response? How are passenger manifests verified? How is family communication handled? What happens if locator beacons fail? How does the response continue if weather worsens?
14.9 HLO / HLA Awareness
Helicopter Landing Officers and helideck assistants support the aviation interface. Although Cougar Flight 91 occurred en route rather than on a helideck, the wider offshore aviation system includes manifest control, passenger briefings, PPE checks, emergency readiness and communication.
HLO/HLA training supports disciplined helicopter operations before departure and after arrival. A strong helideck team helps ensure passengers are properly equipped, briefed, accounted for and moved safely.
14.10 Basic H2S Training
H2S was not involved in Cougar Flight 91 and should not be forced into the accident cause. However, Basic H2S training belongs in Suraksha Marine’s wider offshore safety pathway because it teaches alarm response, respiratory protection, withdrawal discipline and emergency decision-making in invisible hazardous atmospheres.
The shared learning principle is this: when an alarm indicates a life-threatening hazard, workers must respond immediately and correctly. Whether the hazard is gas, fire, flooding or helicopter impact, hesitation can be fatal.
15. Trainer Discussion Questions
-
Why should Cougar Flight 91 be taught as both a technical failure case and a survival case?
-
What changed when the main gearbox oil pressure warning activated?
-
Why is a normal oil temperature reading not enough to dismiss a serious oil pressure warning?
-
What does “land immediately” mean in an offshore helicopter context?
-
Why can continuing toward shore become more dangerous than ditching early?
-
What does this accident teach about the difference between a controlled ditching and a crash into water?
-
Why did the emergency flotation system not protect the occupants in this accident?
-
What survival problems occur when a helicopter sinks quickly?
-
Why is cold-water shock so dangerous for underwater escape?
-
How can recent HUET training improve survival chances?
-
Why is immersion suit fit a life-safety issue?
-
What does this case teach about personal locator beacons and rescue location?
-
How does CRM in the cockpit affect passengers in the cabin?
-
What assumptions existed before the accident that should have been challenged?
-
How can offshore workers stay mentally prepared without becoming fearful?
-
What part of your own helicopter briefing do you pay least attention to — and why?
-
What should a worker do if survival equipment does not fit correctly?
-
How should emergency response teams prepare for a helicopter accident involving cold water?
-
Why are refreshers like FOET important for experienced personnel?
-
What is one barrier in this case that Suraksha Marine training can strengthen?
16. Key Takeaways — The Survival Chain Must Hold
Cougar Flight 91 remains one of the most important offshore helicopter safety case studies because it shows how rapidly a technical failure can become a cold-water survival emergency.
The accident began with a main gearbox oil pressure warning. It developed into a loss-of-lubrication event, gearbox damage, loss of tail rotor drive, control difficulty, high-rate water impact, rapid sinking and a severe survival challenge.
The numbers are stark:
18 people onboard.
17 fatalities.
One survivor.
Main gearbox oil pressure dropped below 5 psi.
The aircraft struck water about eleven minutes after the warning.
The wreckage sank in about 169 metres of water.
The survivor remained in cold water for about one hour and twenty minutes before recovery.
The lessons are equally clear.
Engineering integrity matters.
Maintenance implementation matters.
Procedure clarity matters.
Crew resource management matters.
Emergency decision-making matters.
Impact survivability matters.
Flotation systems matter.
Immersion suit fit matters.
HUET matters.
Sea survival matters.
Locator beacons matter.
SAR readiness matters.
For offshore workers, the case teaches personal discipline: listen to the briefing, know your exit, understand your harness, wear your equipment correctly, never inflate inside the aircraft, stay current with HUET and FOET, and take cold-water survival seriously.
For operators and safety leaders, the case teaches system discipline: known hazards must be acted on quickly, maintenance changes must be implemented effectively, manuals must be clear, CRM must be modern, emergency equipment must match the operating environment, and rescue systems must be ready for the real conditions workers face.
The final message for trainees is this:
You may have only seconds inside the aircraft and minutes in the water. What you do in those seconds depends on the training, equipment and safety culture built long before the emergency begins.
How Suraksha Marine’s Training Helps
Learn the systems behind offshore safety—not just the procedures. Suraksha Marine’s offshore training portfolio is built around practical competence, emergency readiness, and a deeper understanding of the risks offshore professionals face, including helicopter-related transport realities and broader offshore safety systems.
For learners, CHC 241 is a reminder that safety depends on far more than personal reaction; strong training helps workers understand their role inside a much larger chain of protection, preparedness, and operational discipline
Take the Next Step with Suraksha Marine
If this case study raised important questions about your team’s offshore readiness, this is the moment to turn insight into action.
Learn more about our OPITO-approved HUET, BOSIET, FOET, OERTM, ERME, CA‑EBS and A‑MAST programs
VISIT: https: www.surakshaweb.com
Talk to a training specialist about the right courses for you or your crew:
Training Inquiries:
-
Email: surakshaweb@gmail.com
-
Phone: +91 99873 00771 / +91 98192 12260
-
Website: www.surakshaweb.com
Ready to enroll or request a corporate proposal?
Course & inquiry form: https://www.surakshaweb.com/contact
Your offshore team may only get one chance in a real emergency. Make sure their training is not the weak link.