Publisher’s Platform: The Traceability Rule Was Supposed to Be Law in January. This Cyclospora Outbreak Started in May.

Over the weekend a single laboratory sample went from positive to false positive, and by Sunday night Taylor Farms was telling the public that FDA had apologized to it. On Monday FDA answered in its own voice, and the Washington Post’s Lena Sun put the answer plainly: the agency has not backed away from its conclusion that the company remains linked to this outbreak. One sample changed. Nothing else did. The recall stands. The traceback stands. The epidemiology stands — hundreds of interviews with sick people who ate the same shredded iceberg lettuce. That is what an outbreak investigation is built on. It was never built on one test.

I have spent more than thirty years watching companies mistake a negative product sample for innocence. Product testing finds contamination when you are lucky. Cyclospora makes you unlucky more often than most. The oocysts are sparse, they scatter through an enormous volume of lettuce, and testing for the parasite is harder than testing for E. coli or Salmonella. The absence of a positive is not evidence of a safe product. It is evidence that you sampled the wrong bag.

What deserves more attention than the retracted sample is the question of process, and CBS MoneyWatch’s Megan Cerullo got the right person to ask itCéline Gounder’s point was not how a lab made an error. Labs make errors, and as a laboratory event that is ordinary. Her point was why an unconfirmed single-sample result went public on a Saturday and was withdrawn on a Sunday, and whether the agency followed its own policy for announcing a presumptive positive before confirmatory testing closed. FDA did not answer CBS on that. It should answer someone.

The same piece is the best short primer yet on who Taylor Farms actually is. Bruce Taylor founded it in 1995 in the Salinas Valley. It now employs 25,000 people, booked six billion dollars in revenue, owns Earthbound Farms, and makes forty percent of the salad kits sold in this country. It supplies Walmart, Costco, Target, Whole Foods, McDonald’s and Taco Bell. Jennifer McEntire of Food Safety Strategy made the point that consumers hear the name and picture a family farm. It is not a family farm. It is one of the largest fresh-cut processors on earth, and when it has a bad week, the entire country has a bad week.

“This is not normal, and it’s not acceptable.” — Jennifer McEntire

It is also not the first bad week. In 2013, Taylor Farms salad mix out of Guanajuato went to Olive Garden and Red Lobster and sickened hundreds with Cyclospora. In 2024, Taylor Farms slivered onions went onto Quarter Pounders; more than a hundred people were sickened and one person died, and FDA found dozens of violations at the plant that made them, including dirty equipment. Now it is shredded iceberg out of central Mexico. Different commodity, different plant, same company, same decade. At some point a run of bad luck stops being luck and starts being a business model.

Taylor Farms has said FDA pointed to a single independent farm supplying less than one percent of the American iceberg supply. Perhaps. But a single farm can only sicken thousands of people because a company the size of Taylor Farms takes that farm’s lettuce, shreds it, blends it, and moves it into the food supply of half the country inside of a week. That is not the farm’s scale. That is Taylor Farms’ scale. Scale is what turns a contaminated field into a national event, and scale is the company’s own choice.

Consumer Reports has been the most useful watchdog on the disclosure itself. Brian Ronholm, its director of food policy, called what Taylor Farms put out thin and insufficient for an outbreak this serious, and CR is pressing the company to be more forthcoming. CR also caught something worth sitting with: most of the implicated lettuce went to food service distributors — and that fact appears in FDA’s version of the recall notice, not in Taylor Farms’ own. It is the same pattern that has run through this entire week. The company’s version of a document keeps coming out thinner than the government’s version of the same document. Meanwhile the footprint keeps widening past Taco Bell. Walmart pulled four Marketside bagged iceberg products. And on Saturday, Jack in the Box said the recalled lettuce had reached its restaurants in Texas, Oklahoma and Louisiana, swapped in another supplier, and reported no illnesses connected to its food. I have been doing this since 1993. I did not expect to type that company’s name in an outbreak story again this summer.

Which brings me to the part that should worry people the longest. ms.now asked why we know so little about an outbreak this large, and the honest answer is that we cut the people whose job it is to know. Last July, CDC narrowed FoodNet — the sentinel network that flags foodborne illness early — from eight pathogens down to two, keeping Salmonella and Shiga toxin-producing E. coli and dropping Cyclospora altogether, citing inadequate funding. CDC’s entire food safety program received seventy-two million dollars in fiscal 2024, and that one line item is supposed to cover FoodNet and the grants that pay for state epidemiology and laboratory work. At FDA, HHS moved to cut thousands of positions, including more than 170 from the Office of Inspections and Investigations, at an agency that in 2024 had 443 food safety inspectors for 36,600 facilities it estimates would take 1,500 inspectors to cover.

Then there is the money that never reaches a federal building at all. Congressman Josh Gottheimer put the number out on Monday: HHS has terminated 444 CDC grants worth $5.78 billion, and he says more than 4,300 people have been fired at FDA. Those grant dollars are not overhead. They go to the state and local health departments that conduct the interviews, run the stool tests, and do the shoe-leather work of an outbreak investigation. Barbara Kowalcyk at George Washington University has said plainly that the funding cuts have affected this response, because thin staffing slows the patient interviews, and every week of delay makes it harder — people stop remembering what they ate, and the food itself is long gone. Michigan’s own chief medical executive told Consumer Reports the state’s review is “very, very manual,” run on data systems that badly need modernizing. And the one tool that would have made this traceback fast, the Food Traceability Rule requiring lot-level records, was pushed from 2026 to 2028 at industry’s urging and with Congress’s blessing.

The people who do this work for a living are saying the same thing in plainer language. Sarah Sorscher at the Center for Science in the Public Interest is careful about where the blame belongs — not on CDC’s investigators, who she says are “completely overwhelmed by the scale and scope of the work.” Her number is the one that stayed with me: CDC filled only about 40 percent of the requests for help it received from state and local partners last year. Tom Gremillion at the Consumer Federation of America has laid out the arithmetic behind that. CDC’s workforce is down more than a quarter since January 2025, $11.4 billion in CDC grant money to the states was clawed back, and roughly 80 percent of CDC’s domestic funding goes to state and local partners — which is why a decision made in Washington lands in a county health department in Monroe County, Michigan. The president’s budget for fiscal 2027 proposes cutting CDC’s discretionary funding by another 40 percent. Gremillion calls the FoodNet downgrade emblematic of a “hear no evil, see no evil”approach to disease. That is about right.

The government’s answer is that none of this mattered here. FDA says its outbreak-response investigators were not touched by the reductions, and a CDC official has said the FoodNet changes did not hamper the response. Fine. Then explain the calendar. The first illnesses began in mid-May. Michigan announced an outbreak on July 1. A product was not named until July 17. That is two months in which contaminated lettuce kept moving and people kept eating it. You do not get to thin the system, defer the traceability rule that would have sped it up, cancel the grants to the states doing the interviews, and then tell the public that none of it made any difference.

One more thing that deserves saying out loud. CDC and FDA have officially confirmed exactly one outbreak here — shredded iceberg lettuce served at Taco Bell in five states. That is the cluster in the CDC investigation notice, and on FDA’s own outbreak table it carries a footnote conceding that the cluster is only a subset of domestically acquired cyclosporiasis in this country. The same table shows FDA running four other open Cyclospora investigations at the same time. And CDC’s own surveillance page put the number at 1,645 laboratory-confirmed domestic cases across 34 states and said the agency was aware of more than 5,100 additional cases awaiting analysis. Five states and one restaurant chain is the part the government has been willing to put its name on. Several thousand more sick people are the part left unsaid.

It helps to know what a normal year looks like. Over the last five seasons, CDC has counted somewhere between roughly a thousand and three thousand domestically acquired cases in an entire year — 1,024 in 2021, close to 3,000 in 2023, and 1,180 in all of 2025, with 105 hospitalizations and no deaths across the whole country. FDA’s own Cyclospora action plan describes roughly 3,000 domestically acquired cases over three years. Call the recent average somewhere around 1,500 people a year. Now hold that against this season. CDC’s own health advisory says it had 249 cases at this point last July and has 1,645 now — already more than the entire 2025 season, with six weeks of Cyclospora season still to run and a six-week reporting lag behind that. Michigan alone has reported more than 6,100 cases. One state, in two months, has roughly four times the number of people this country normally sees sick in a year.

So here is where things actually stand. FDA says the data still converge on Taylor Farms de Mexico. The recall is still in effect. The product is still coming off shelves. And thousands of people are still sick, many of them for weeks, most of whom will never appear in anyone’s official count. The lab got one sample wrong. Everything else about this outbreak is exactly as bad this morning as it was on Friday.

So let me say what I want, because complaining without an ask is just noise. Restore the Microbiological Data Program. USDA ran it from 2001 until 2012 for about five million dollars a year. State laboratories pulled high-risk produce — lettuce, spinach, sprouts, tomatoes, cantaloupe — out of commerce and tested it, and when a sample came back positive the result went straight to FDA and the states. In its last two years alone it triggered twenty-three produce recalls. It was a trip wire, it was cheap, and the produce industry lobbied it dead in 2012under a Democratic administration, which is why I keep saying this is not a partisan story. Fourteen years later FDA is chasing this outbreak with one border sample and no routine produce testing program to fall back on. That is not bad luck. That is a decision somebody made in 2012 and nobody has revisited since.

Put the Food Traceability Rule into force. Leafy greens are on the Food Traceability List. The rule requires lot-level records at every critical tracking event and delivery of those records to FDA within twenty-four hours of a request. Its compliance date was January 20, 2026. Read that again, because the first illnesses in this outbreak began in mid-May. Had the rule taken effect on schedule, the records that would have walked this lettuce back to a single field would have been a legal obligation four months before anyone got sick. Instead FDA proposed a thirty-month delay in March 2025, published it that August, and Congress made it binding in November, directing the agency not to enforce before July 20, 2028. Industry asked for the delay and industry got it. We are now living inside the window that delay created, running a traceback by hand, in the exact months the rule was supposed to be doing the work.

Restore the cuts. Fund FDA’s human foods program and the inspectors who are supposed to walk the plants. Fund CDC, and fund the grants that pass through to the state and local health departments where the actual work happens, because that is where a federal spreadsheet turns into somebody knocking on a door. Put Cyclospora back into FoodNet along with the five other pathogens dropped alongside it — Campylobacter,ListeriaShigellaVibrio and Yersinia. A country that stops counting a bug does not thereby have less of it. It only loses the ability to say so, which I suspect was the point. Make the bugs countable again. (MBCA hat anyone?)

And stop treating public health as an expense and science as an inconvenience. The people who found this outbreak were state epidemiologists in Michigan and Ohio telephoning sick people one at a time and asking them what they ate nine days ago. They were not a line item waiting to be trimmed. They were the only reason any of us know this is happening. Every one of these asks costs less than the outbreak does. We are paying for it anyway — in hospital beds, in weeks of work nobody got back, and in a produce industry that will spend the rest of this season under suspicion because no one could say fast enough which farm it was. You can pay for surveillance, or you can pay for this. Right now, we are all paying for this.

BTW – See you at IAFP next week in “The Big Easy.”

Scroll to Top