On September 11, 2026, CDC declared the multistate outbreak of Cyclospora infections linked to iceberg lettuce from Taylor Farms de Mexico over. The final federal count is 12,883 laboratory-confirmed illnesses across twenty-one states, 570 hospitalizations, two deaths in Michigan, and a last illness onset of August 17. Virginia was added as the twenty-first state on the day the outbreak closed. Nothing in the American record comes close.
Cyclosporiasis is an intestinal illness caused by Cyclospora cayetanensis, a microscopic parasite spread through human feces in contaminated food or water. It cannot come from animal manure, washing does not reliably remove it, and chlorine does not kill it.
The outbreak is only part of the season. As of September 8, CDC had recorded 19,595 laboratory-confirmed domestic cases since May 1, against 1,180 in the same stretch of 2025. Subtract the 12,883 tied to the lettuce and roughly 6,700 confirmed illnesses have no food named beside them at all. I intend to keep asking about those people into the winter.
What the FDA did on the way out
FDA opened a new page called Post-Outbreak Response Activities. It reports that senior FDA and Mexican officials met during the week of September 8 to encourage a prevention-focused framework, that FDA will fold what it learns into its Cyclospora Prevention, Response and Research Action Plan in the coming months, and that it is sending a letter to industry calling for collaboration across the supply chain.
Read the letter. It reminds the regulated industry that it must apply science-based agricultural water management, worker health and hygiene controls, and sanitation under the Produce Safety Rule at 21 CFR Part 112; preventive controls, including a supplier program, under 21 CFR Part 117 where they apply; and rigorous foreign supplier verification under 21 CFR Part 1, Subpart L. Every one of those is already the law. After the largest outbreak of this parasite ever recorded here, the federal output is a letter asking industry to comply with rules that have been on the books for years.
And here is the fact that should worry growers and shippers more than anything else on that page. FDA’s onsite inspections and sample collection at the lettuce growers and the processing facility in Mexico have ended. The samples are pending analysis. No root cause has been named. We have been here before: in the 2020 bagged salad outbreak, CDC declared the outbreak over and FDA’s traceback was complete, and the cause or source was never determined. Industry cannot fix what it is never told.
CDC was clear about why it closed the file: infections had declined and the lettuce was gone from stores and restaurants. That is a finding about future risk, not about cause, and the same update says FDA is still investigating how the contamination happened. The agency that counts the sick is finished; the one that is supposed to find out why is not, and only one of the two has a published finish line.
The ten states that got the lettuce and reported nobody sick
Put the two federal lists side by side. FDA confirmed distribution in thirty-one states, and all twenty-one outbreak states sit inside it. In an outbreak with no positive product sample, that coherence is real corroboration, and I will say so plainly.
The inverse is the more interesting number. Ten states got confirmed distribution and reported no outbreak illnesses at all: Alabama, Connecticut, Florida, Louisiana, Maryland, Mississippi, New Jersey, New York, South Carolina and Wisconsin. Look at New York and Florida. Both have run hundreds of cyclosporiasis cases this season with no source named. Either the lettuce arrived and sickened nobody, which is possible, or nobody did the interviews and typing that would have found out. The federal record cannot tell you which, and that is the whole problem.
Ten things the FDA should do before next May
1. Publish what the investigation found, including the negatives. FDA has its own root cause analysis program and a promise to update its action plan in the coming months. Name the month, and report the sample results either way. A published negative is real information: it tells every farm in that valley the contamination was not where investigators looked.
2. Describe the supply shed. Traceback converged on one processor, then inspections moved upstream to multiple growers. Tell us how many farms fed that plant and how many water sources served them, even if private farm names stay out.
3. Give industry a detection method it can actually run. FDA has a validated laboratory method for finding Cyclospora in fresh produce. There is no comparable routine tool a grower can use on irrigation water, sediment or soil at commercial scale and commercial speed. Fund it, validate it, publish it, and stop asking companies to manage a hazard they cannot measure.
4. Restore the parasite research and say plainly what the agency needs. Congress did not appropriate funding for two federal Cyclospora research projects in the FY2026 agriculture bill, and the third is being relocated away from the scientists who run it, as reported at the end of August. FDA should put in writing which research questions it cannot answer without that work.
5. Make genotyping routine and push it to the states. CDC used Cyclospora genotyping this summer to show that illnesses were genetically related. It is the first tool on this beat that does not depend on somebody remembering a June salad. Publish the protocol, fund state laboratory capacity, and make it standard again.
6. Put Cyclospora back into FoodNet, and make it mandatory again. FoodNet has been the audited count of foodborne illness since 1995, run by CDC with FDA, USDA and ten states. Cyclospora went on the list in 1997. On July 1, 2025, after twenty-eight years, reporting for it became optional, along with five other pathogens; only Salmonella and STEC stayed mandatory. I wrote about it in July, before this outbreak had a name. FoodNet is ten sites, not a national tally, so it would not have counted these cases. It is the yardstick for normal, and we entered the worst Cyclospora year on record without it.
7. Rebuild the Microbiological Data Program, and put a parasite on the panel. From April 2001 until December 2012, USDA tested roughly fifteen thousand produce samples a year at distribution centers, more than any other federal or state program. It was killed to save about five million dollars. I have been asking for it back since 2024. Here is the honest part: MDP looked for bacteria, not parasites, so restoring it as it was would not have found this. Rebuild it with Cyclospora on the panel, which is only possible once item three exists.
8. Attack the six-week reporting lag with a funded plan and a number. Every federal page carries the same caveat: it takes about six weeks to know whether a sick person belongs to an outbreak. That lag is why the recall came after most people had already eaten the lettuce. Say how fast the agencies intend to get, by when, and what it costs.
9. Lift the spending prohibition on traceability and water, and build the system Congress ordered in 2011. Section 780 of the November 2025 appropriations law bars FDA from spending a dollar to administer or enforce the Food Traceability Rule before July 20, 2028, and restricts enforcement money for the Produce Safety Rule and its pre-harvest agricultural water requirements. FDA’s letter asks industry to follow water practices Congress has defunded the agency from enforcing. Section 204 of FSMA also told the department to build a system inside FDA capable of receiving traceability information, and a Congressional Research Service report, citing a Government Accountability Office finding from this January, says no such system exists. Fifteen years.
10. Publish the framework with Mexico, including commitments and dates. A meeting during the week of September 8 is not a framework. The food safety partnership with Mexico has existed for years. Say what each side committed to, who verifies it, and when the first deliverable is due.
Why this is industry’s fight too
Fast, accurate traceback draws a line. It says this facility, this lot, this week, and what everything else is not. Without the line, fear prices the whole category, and this summer iceberg sales fell for growers with no connection to Guanajuato. Every one of the ten items narrows the circle. The alternative is the 2020 outcome, where the investigation quietly ends and the next grower learns nothing from the last grower’s disaster.
The count you will not find on any federal page
Add up what the state health departments published themselves and the total runs past thirty-two thousand. Michigan alone reported 14,277 cases as of August 20, more than CDC’s entire twenty-one-state outbreak figure. The two series do not measure the same thing, and the difference is worth understanding rather than shouting about. CDC counts only laboratory-confirmed illnesses it has attributed to this outbreak inside its May 1 season, and it files a sick traveler under the state visited rather than the state of residence. States count what they see: many include probable cases, some count on the calendar year, and all of them post before CDC finishes confirming. Neither number is wrong. They answer different questions, and the gap between them is about the size of the outbreak itself.
Now put the confirmed count in context. Scallan and colleagues, writing in CDC’s own journal in 2011, estimated an underdiagnosis multiplier of 83.1 for cyclosporiasis: for every laboratory-confirmed case, roughly eighty-three infections. Apply that to 19,595 and the estimate is on the order of 1.6 million Americans infected this summer. Apply it only to the 12,883 tied to the lettuce and it is still above a million. Treat those as orders of magnitude rather than counts. The multiplier was built before multiplex stool panels were common, so it probably runs high today, and testing this summer was unusually aggressive. Cut it in half twice and the answer is still that the people sickened by this lettuce number in the hundreds of thousands, and that almost none of them will ever appear in any government table.
The outbreak is closed. The investigation is not. All of those people are owed an answer about how a parasite that travels in human waste got onto lettuce bound for American tables. A letter asking industry to reread the regulations is not it.
Recent Comments