The United States has just closed the books on the largest cyclosporiasis outbreak ever recorded on American soil, and the final numbers are still climbing. According to the Centers for Disease Control and Prevention, 19,883 laboratory-confirmed cases of cyclosporiasis acquired domestically were reported with symptom onset during the 2026 season, which federal officials define as running from May 1 through August 31. The figure, published on the agency's Cyclospora case-data and surveillance pages updated in mid-September, is unprecedented both in scale and in geographic reach — a national event that has touched virtually every state and prompted a federal food-safety response spanning two agencies, multiple recalls and at least half a dozen separate investigations.
Michigan is among the states caught up in that sweep. Early reporting framed the outbreak as "more than 18,000 cases across 45 states," but federal data now indicate the true footprint is larger and wider: counts compiled by Reuters from CDC figures in late August put the outbreak at 17,180 confirmed cases across 48 states plus Washington, D.C., with 922 hospitalizations and two deaths as of August 24, along with at least 11,844 additional cases still under investigation. Those numbers have since risen further.
A season unlike any other
The raw arithmetic of the 2026 season is difficult to overstate. Cyclosporiasis is not a disease that ordinarily generates five-figure national case counts. It is a parasitic infection that until recently appeared in the United States mostly as a travel-associated illness or in small, contained clusters tied to imported produce and fresh herbs. The 2026 season broke that pattern comprehensively.
The escalation was visible in the data throughout the summer. On July 14, the CDC issued a Health Alert Network advisory warning clinicians and public health practitioners about domestically acquired cyclosporiasis in multiple states. At that point, the agency had tallied 1,645 confirmed domestic cases since May 1, with more than 5,100 additional cases requiring further analysis and reports from at least 34 states — figures that, at the time, already looked extraordinary.
By mid-August, the picture had darkened considerably. CDC figures showed 15,716 confirmed cases across 47 states, 828 hospitalizations and two deaths as of August 17, with roughly 11,841 additional possible cases awaiting classification. One week later, on August 24, the confirmed count had reached 17,180 across 48 states plus the District of Columbia, hospitalizations had climbed to 922, and the death toll held at two, while more than 11,800 cases remained under investigation.
By the time the CDC's surveillance pages were refreshed around September 15–16, the confirmed total stood at 19,883 — a number that officials have signalled may still be revised as outstanding laboratory results are processed.
From iceberg lettuce to Taco Bell: how the outbreak unfolded
The single largest driver of the outbreak was identified as iceberg lettuce supplied by Taylor Farms de Mexico, a product that reached consumers through multiple channels, including restaurants operated by Taco Bell. The U.S. Food and Drug Administration announced a multistate outbreak investigation into Cyclospora illnesses linked to iceberg lettuce on July 16, 2026, working in coordination with the CDC and state health departments. Traceback efforts pointed to the Mexican supplier, and a voluntary recall followed on July 17.
The lettuce investigation was not the only thread. The FDA's foodborne illness tracker has listed multiple Cyclospora outbreaks under active investigation, with at least six separate outbreaks noted as of early August — a reminder that the season's totals reflect more than one contamination event, even if the lettuce-linked outbreak dominated the headlines.
On September 11, the FDA and CDC jointly declared the major multistate outbreak linked to iceberg lettuce to be over. The declaration closed the acute phase of the response but explicitly did not close the file: both agencies have said investigation and post-outbreak response activities are continuing, including the analysis of cases that remained unresolved when the season formally ended.
What cyclosporiasis actually is
Cyclosporiasis is caused by Cyclospora cayetanensis, a single-celled parasite that infects the small intestine and produces watery diarrhoea, loss of appetite, cramping, bloating, fatigue and other gastrointestinal symptoms. It is transmitted through food or water contaminated with the parasite — it is not spread directly from person to person, a distinction that matters for how outbreaks are investigated and controlled.
The illness is typically treatable with antibiotics, and many people recover without specific therapy, but it can be prolonged and debilitating, and it poses particular risks for those who are immunocompromised, very young or elderly. The 922 hospitalisations reported as of late August represent the severe tail of a case distribution that in all likelihood runs into the tens of thousands when probable and unclassified cases are included.
The parasite's biology is also part of why this outbreak proved so difficult to contain. Cyclospora is not killed by routine washing of produce, and because it is not transmitted person-to-person, the standard playbook of isolation and contact tracing does not apply. Control depends almost entirely on supply-chain traceback, product withdrawal and consumer awareness — a set of tools that necessarily lag behind the moment of contamination.
Why the geography matters
The reach of the 2026 season is one of its defining features. A pathogen that once appeared in American surveillance as a scattering of travel-linked infections has now been confirmed in 48 states plus Washington, D.C., with earlier counts listing 47 states and, at the July alert stage, 34 states.
That geographic spread has consequences beyond the raw count. State and local health departments across the country — including in states like Michigan that do not typically handle large volumes of cyclosporiasis — have had to stand up laboratory capacity, epidemiological investigation and public communication for a disease many frontline clinicians had rarely encountered. The CDC's decision to issue a Health Alert Network advisory in mid-July was in part a recognition that the clinical and public-health workforce needed reminding of what to look for and how to confirm it.
The federal count has also been a moving target, which complicates public understanding. The gap between the 1,645 confirmed cases announced in July and the 19,883 confirmed cases reported in September reflects both genuine spread during the peak summer months and the slow process of laboratory classification — the "additional cases under investigation" that have featured in every iteration of the data. At their peak, pending cases numbered more than 11,800, roughly comparable in size to the confirmed total at that time.
Scrutiny turns to food safety and surveillance
With the acute outbreak over, attention is shifting to the questions the season has raised about how the American food system and its regulators detect and respond to parasitic contamination.
Several lines of criticism have emerged. The first concerns detection: by the time the CDC issued its July alert, thousands of cases were already under investigation, suggesting that surveillance signals lagged behind the spread of illness. The second concerns traceback speed — the lettuce-linked outbreak was announced on July 16 and the recall followed a day later, but the investigation covered a period in which cases had been accumulating since May 1. The third concerns scope: the presence of at least six separate Cyclospora outbreaks on the FDA's tracker implies that the lettuce event, while the largest, was not the only contamination pathway operating during the season.
There is also a structural question about imported produce. The traceback to Taylor Farms de Mexico places the outbreak at the intersection of cross-border supply chains and domestic food safety oversight — a regulatory boundary that has historically been difficult to police, and one that the 2026 season has thrust back into focus.
The standard response from federal agencies in situations like this is that the system worked as designed: an outbreak was detected, investigated, traced and stopped, and the implicated product was recalled. That position is factually defensible — the lettuce-linked outbreak was declared over on September 11, and the recall moved quickly once the source was identified. But critics of the current regime argue that the sheer scale of the season, and the fact that nearly 20,000 confirmed cases accumulated before the event was fully characterised, indicates a system that responds effectively but not early enough.
The human and economic dimensions
Behind the surveillance numbers sit tens of thousands of individual illnesses, more than 900 hospitalisations and two deaths. Cyclosporiasis can persist for weeks or, in some patients, relapse after apparent recovery, and the burden it imposes — lost work, medical costs, prolonged discomfort — is not captured in a case count.
There is a commercial dimension as well. The recall and the associated publicity affected a national restaurant chain and a cross-border supplier, and the reputational and financial consequences of being named in a multistate outbreak investigation can be substantial. The FDA and CDC have not, in the material reviewed, assigned fault or liability, and the traceback process is a technical exercise rather than an adjudication.
For state health departments, the season has been an operational strain. Investigators have had to process thousands of laboratory reports, interview patients, and distinguish between confirmed, probable and still-unclassified cases — a triage exercise that in a high-volume year can overwhelm routine capacity.
What happens next
Three things are now in motion.
The first is data finalisation. The CDC's case counts for the 2026 season remain open, with the September 15–16 updates representing the most recent revision rather than a final figure. Officials have indicated that outstanding cases are still being classified, which means the confirmed total of 19,883 is likely to move.
The second is the completion of post-outbreak response activities. Although the iceberg lettuce outbreak has been declared over, the FDA and CDC have said investigative and response work continues, including follow-up on the other Cyclospora outbreaks listed on the FDA's tracker. Whether those investigations yield additional product actions, or confirm that the lettuce event accounted for the bulk of the season's cases, will shape the retrospective assessment of 2026.
The third, and in the longer term the most consequential, is the policy question. A record season of this magnitude — one that spanned 48 states plus the District of Columbia, produced more than 19,000 confirmed cases and roughly 900 hospitalisations, and took two lives — creates pressure for review. That review is likely to focus on the speed of surveillance signals, the mechanics of cross-border produce traceback, and whether the tools available to regulators are adequate for a parasite that cannot be washed off a leaf of lettuce.
For now, the most immediate message is one of resolution and vigilance in equal measure. The outbreak linked to iceberg lettuce is over, and the summer spike in cases has passed. But the parasite has not gone anywhere, the season's full accounting is still incomplete, and the questions the 2026 outbreak raised about how the United States detects contamination in its food supply remain open — with the next season's data, due from May 2027 onward, set to show whether anything has changed.