The concentration to be fatal is as low as 2 parts per million Info. So assuming they release in an underground train network where air is recycled the absolute amount isn't that great. And it is fear that is more required than an absolute number of deaths. Even one carriage in one train in rushour is perhaps 100 people.