The multistate Cyclospora outbreak linked to iceberg lettuce from Taylor Farms de Mexico closed on September 11, 2026 with 12,883 illnesses, 570 hospitalizations and 2 deaths in 21 states. Investigators did not lose the supply chain. They followed it to the supplier within a day and lost it at the last link, the farm field and whatever water touched the lettuce there. That last link is what the federal Food Traceability Rule is built to record, and Congress has told the FDA it may not spend money enforcing that rule until July 20, 2028.
The Packer ran a thoughtful piece Thursday by Jill Dutton with Fabiola Negrón, director of food safety at Registrar Corp. Her diagnosis is sound. People remember meals poorly and weeks after the fact. Records run out a few steps back. A company can keep good internal records that never connect to its growers’ records. Produce with a short shelf life is gone before anyone can test it. On Cyclospora specifically, she said finding the product was the simpler part, and that once investigators knew the supplier, the gap was that the supplier did not know the source.
She is right. The headline, though, says the outbreak ended in a supply chain mystery, and the distinction matters for what gets fixed.
What investigators found, and how fast
The FDA and CDC announced the investigation on July 16. On July 17 the agencies said traceback had converged on a single supplier, Taylor Farms de Mexico, and the company recalled all iceberg lettuce sourced from central Mexico. On July 19 the FDA withdrew a positive lettuce sample as a false positive, and no product sample has since tested positive. The link rests on epidemiology and traceback. In August, CDC added genotyping showing that the parasites from sick people were genetically related, which ties patients to each other and to a single source, though not to a sample of lettuce.
For fairness: Taylor Farms says it raised scientific questions about the government’s assumptions and methodology in its first call with the FDA, CDC and Michigan health officials. Neither agency has changed its conclusion. CDC’s outbreak page still states that the investigation linked the outbreak to processed iceberg lettuce from Taylor Farms de Mexico.
Where the trail went cold
On August 20 the FDA’s inspection moved from the processing plant to iceberg lettuce growers in Mexico. At the close, Food Safety Magazine reported that the FDA had completed inspections and sampling at the growers and the processing facility, with results pending and root cause work continuing. The FDA’s own post-outbreak page says its investigation of the Taylor Farms de Mexico outbreak goes on, along with the investigations into the other clusters this summer.
Consider also the size of the recall: all iceberg lettuce from a region of Mexico. That is my reading, not an agency finding, and a company acting out of caution would recall the same way. Still, a recall drawn around a region instead of a lot or a field is what the gap Negrón describes looks like in practice.
The rule that records the field
Section 204 of the Food Safety Modernization Act, signed in January 2011, told the FDA to propose traceability requirements for high-risk foods by January 2013. The agency missed the deadline and wrote the rule only after the Center for Food Safety sued and a court set a schedule. The final rule came out in November 2022. For foods on the Food Traceability List, which includes leafy greens, it requires key records at each step, including a traceability lot code and where the food was harvested, and it requires companies to produce those records for the FDA in a sortable electronic spreadsheet within 24 hours.
The compliance date was January 20, 2026, nearly five months before the first illness in this outbreak. In March 2025 the FDA announced a 30-month delay. In November 2025 Congress went further. Section 780 of Division B of H.R. 5371, the bill that ended the shutdown, bars the FDA from using appropriated funds to administer or enforce the rule before July 20, 2028, according to a Congressional Research Service report. A delay is an agency deciding industry needs more time. A funding prohibition leaves the agency unable to act even if it changes its mind. The Packer notes the 2028 date without explaining where it came from. Fifteen and a half years separate the statutory deadline from the first day of enforcement.
Nobody can prove after the fact that an enforced rule would have taken investigators to one field this summer. Getting investigators to the field is what the rule is designed to do, and this outbreak is the case it was written for.
The fear she describes is a cost to industry
Negrón made a point the produce industry should take to heart. Frightened shoppers do not read lot numbers. They avoid the whole category until the news fades. The Packer’s own reporting found that this outbreak hurt grocery foot traffic well beyond the produce aisle. Traceability draws a line around the problem, and without that line fear prices the entire category. Growers, packers and retailers who did nothing wrong paid for that this summer.
Some of the associations speaking for those same retailers and distributors asked Congress to wait on the rule, as their own lobbying disclosures show. I wrote about those filings in August. Western Growers told the Guardian that it supports the rule, so industry is not of one mind, and that is worth remembering.
The bigger mystery
The mystery The Packer’s headline promises is real, but it sits elsewhere. CDC now counts 19,883 laboratory-confirmed, domestically acquired _Cyclospora_ cases from May 1 through August 31. Subtract the 12,883 in the lettuce outbreak and 7,000 confirmed cases remain with no food named. Those investigations never got far enough to hit a supply chain wall. On September 15 CDC stopped updating that page weekly. Over the coming months, epidemiologists and I will be working to learn where those people were infected.
Questions readers are asking
Did investigators find the source of the 2026 Cyclospora outbreak?
They found the supplier, Taylor Farms de Mexico, within a day of announcing the investigation. As of the September 11 close, the FDA had not named a farm or a root cause, and sample results from the Mexican growers were pending.
Would the Food Traceability Rule have helped?
The rule requires harvest location and lot codes to travel with leafy greens and requires records within 24 hours. Enforcement is barred until July 20, 2028.
Test the system
Negrón’s advice to companies is to test the traceability system rather than keep a plan on paper. Congress should take the same advice. The country had a system, with a written rule and a compliance date, and Congress took the money away before anyone could test it. Eleven consumer, public health and labor organizations have asked Congress not to push the rule back further. The fastest way to shrink the next supply chain mystery is to let the FDA enforce the rule it already wrote.
Recent Comments