
Adding up what each of the fifty state health departments reports on their own websites, the floor under the 2026 Cyclospora outbreak this Tuesday evening, August 25, is 32,500 people.
CDC posted its weekly national update today: 17,180 laboratory-confirmed cases acquired in the United States since May 1, 922 hospitalizations, 2 deaths, and cases in 48 states plus the District of Columbia, with symptom onsets running from May 1 through August 19 — six days before the page went up. At least 11,844 more cases are still waiting on confirmation or investigation.
CDC added 1,464 confirmed cases and 94 hospitalizations in a week, and the backlog finally stopped growing
A week ago, CDC counted 15,716 confirmed domestically acquired cases and 828 hospitalizations. Today it counts 17,180 and 922. That is 1,464 more people confirmed and 94 more people in a hospital in seven days.
The year-over-year comparison CDC prints in its own key points has not softened. For the same stretch of 2025 the agency counted 1,180 domestically acquired cases. The 2026 figure is more than fourteen times that.
What the Taylor Farms outbreak actually is, and the two places anybody has named
It is worth stopping to say plainly what this outbreak is, because the shape of it explains most of the argument above. It began as a restaurant investigation. On July 17 CDC told people not to eat shredded iceberg lettuce from Taylor Farms de Mexico served at Taco Bell locations in Indiana, Kentucky, Michigan, Ohio and West Virginia — 1,644 people who reported eating at Taco Bell, in five states, with 94 hospitalizations and onsets going back to May 13. FDA’s traceback had converged on a single supplier of the shredded lettuce those restaurants used. Michigan pulled the food histories of 190 of those patients and found that 90 percent had eaten iceberg lettuce.
By July 24 the Taco Bell count was 1,947 across nine states, with Illinois, Kansas, Oklahoma and Pennsylvania added. Then on August 5 CDC changed the definition. The outbreak stopped being people who ate at Taco Bell and became people who reported exposure to Taco Bell or to recalled Taylor Farms de Mexico lettuce anywhere, and the count jumped to 6,358 in fifteen states. That is the sentence that carried this from a restaurant cluster to a national one, and it is worth reading twice. It also means the last time anybody published how many of these illnesses are Taco Bell illnesses was July 24, at 1,947. The outbreak is now 10,930. Nobody has updated the restaurant share in a month.
Outside Taco Bell, exactly one place in this country has ever been named. Nine people who ate at the cafeteria salad bar at Cheshire Medical Center in Keene, New Hampshire, were confirmed with cyclosporiasis in July, out of sixteen the hospital identified as exposed, ten of them its own employees. By August 3 the hospital told a reporter it had treated 34 patients who tested positive, that 28 of them had eaten from that salad bar before the Taylor Farms product was pulled, and that 21 of the 28 were Cheshire employees.
There is a reason New Hampshire is the one place with a name on it, and it is not that the lettuce there was different. A hospital can see illness in its own workforce and report it the same week. Twenty-one sick employees in one building is a signal a grocery store cannot generate and a fast-food counter cannot generate. The same lettuce went to foodservice customers in thirty-one states, and to Marketside bags on Walmart shelves in fifteen. Cheshire is not where it uniquely made people sick. It is where the building kept an attendance list.
Everywhere else the trail stops at the loading dock. The recall itself names nine buyers, and the federal enforcement file shows what each of them took: Walmart under the Marketside label at 109,476 cases, Taylor Farms’ own foodservice packs, Cross Valley Farms for US Foods, Sysco, Markon, Peak, Jack in the Box, YUM, and Subway — which at 8,075 cases is the largest restaurant chain in the recall and has said nothing publicly about it in five weeks. Jack in the Box disclosed on its own that recalled lettuce reached its stores in Texas, Oklahoma and Louisiana, and said no illnesses were reported at its locations. Not one illness has been publicly attributed to any of those channels. That is not because none happened. It is because a person who ate a salad at home in June has no reason to connect it to anything, and nobody has asked them.
CDC has tied 454 of the country’s 922 Cyclospora hospitalizations to the recalled lettuce, and has not said what the other 468 are
This is the number that needs saying carefully. The federal outbreak tied to Taylor Farms de Mexico iceberg lettuce accounts for 454 hospitalizations.
Here is what that does not mean. Sitting outside the outbreak count is not a finding that the Taylor Farms’ lettuce did not make those people sick. It means nobody has said either way. Federal attribution in this outbreak runs through interviews — somebody has to remember what they ate in June, weeks before anyone knew to ask — and with a six-week reporting lag, cases keep getting pulled into the outbreak long after they are first counted. Eight states were added to the federal list in August alone.
And the reach of the recalled product is the reason to keep an open mind rather than a closed one. FDA’s own distribution list has the lettuce going to foodservice customers in 31 states, with nine more that may have received it, plus Marketside retail product at Walmart in 15 states. Whatever the explanation, states that took delivery of the recalled lettuce and are not on the outbreak list are not thereby cleared — they are unexamined. New York is the plainest example: 939 cases since May 1, on FDA’s confirmed distribution list, and no attribution published in either direction.
The honest sentence is the uncomfortable one: for somewhere between a third and a half of the people counted sick in this country this summer, nobody has yet said whether the recalled lettuce is the reason or not. CDC said on August 20 that genotyping shows the parasites from sick people in the outbreak are genetically related to each other, which is the first laboratory tool in this investigation that does not depend on anyone remembering a meal. If that testing is run widely, the question can be answered. Until it is, we do not know.
The federal Taylor Farms’ outbreak figure has not moved since Thursday
CDC and FDA both still report 10,930 illnesses, 454 hospitalizations, two deaths and seventeen states, with the last illness onset on August 11. Both pages are stamped August 20. Neither agency has added a state since August 5, and the August 20 update was the first of the entire outbreak to add none.
Six states moved, and three of them had been sitting on my chart too low for a week
Since Sunday night, six state numbers changed and the rest held. Illinois is at 1,437 confirmed and probable cases with 69 hospitalizations as of August 18. My chart carried 1,260. That is 177 more people, and it is the largest single correction on the board this week. Kansas is at 807 as of Wednesday, August 19, against the 748 I was carrying, with 32 hospitalizations — 59 more people.
Iowa posted 327 laboratory-confirmed infections across 58 counties in its Thursday, August 20 weekly report, up from the 300 in 55 counties I was carrying. Virginia moved to 234 as of August 24, up 20, with the domestic column rising 13 and the international column rising 10. Arkansas posted 287 on August 24, up 10 from 277. Oklahoma is at 544 as of August 18, up 38 from the 506 I was carrying, with 36 hospitalizations. Those six increases add 331 people, and 32,169 plus 331 is 32,500.
Here is where all fifty states stand tonight. The Lettuce column is whether FDA has confirmed that recalled Taylor Farms de Mexico lettuce reached that state. The last column is the different and more important question: whether anybody has tied that state’s illnesses to Taylor Farms at all.
| State | 2026 cases | As of | All of 2025 | Lettuce | Taylor Farms |
| Michigan | 14,277 | Aug 20 | 50 | Yes | Linked |
| Ohio | 5,452 | Aug 13 | 76 | Yes | Linked |
| Missouri | 2,152 | Aug 23 | none reported | Yes | Linked |
| Indiana | 2,069 | Aug 19 | 27 | Yes | Linked |
| Illinois | 1,437 | Aug 18 | 301 | Yes | Linked |
| North Carolina | 940 | Aug 18 | 300 | Yes | Linked |
| New York | 939 | Aug 17 | 694 | Yes | Unknown |
| Kansas | 807 | Aug 19 | 29 | Yes | Linked |
| Kentucky | 620 | Jul 29 | 45 | Yes | Linked |
| Oklahoma | 544 | Aug 18 | 41 | Yes | Linked |
| Florida | 407 | Aug 8 | 210 | Yes | Unknown |
| Iowa | 327 | Aug 20 | 64 | Yes | Linked |
| Texas | 315 | Aug 11 | 512 | Yes | Unknown |
| West Virginia | 313 | Aug 21 | 8 | Yes | Linked |
| Arkansas | 287 | Aug 24 | 13 | Yes | Linked |
| Virginia | 234 | Aug 24 | 115 | Yes | Unknown |
| Nebraska | 218 | Aug 6 | 51 | Yes | Linked |
| Wisconsin | 216 | Aug 5 | 65 | Yes | Unknown |
| Colorado | 150 | Jul 17 | 205 | No | Unknown |
| Massachusetts | 145 | Aug 5 | 74 | Yes | Linked |
| Alabama | 85 | Aug 3 | 19 | Yes | Unknown |
| Pennsylvania | 82 | Jul 29 | not notifiable | Yes | Linked |
| Washington | 71 | Aug 21 | not available | May have | Travel link |
| Maryland | 69 | Jul 17 | 123 | Yes | No link found |
| New Hampshire | 69 | Aug 4 | 7 | Yes | Linked |
| New Jersey | 46 | Jul 11 | 180 | Yes | Unknown |
| California | 41 | Jul 14 | not available | May have | Unknown |
| Minnesota | 41 | Jul 17 | none reported | No | Unknown |
| Connecticut | 35 | Jul 17 | 41 | Yes | Unknown |
| Maine | 27 | Aug 7 | 4 | Yes | Linked |
| Oregon | 23 | Jul 24 | not available | No | Travel link |
| Arizona | 19 | Jul 17 | 49 | No | Unknown |
| Georgia | 11 | Jul 17 | 116 | Yes | Unknown |
| Tennessee | 11 | Jul 17 | 38 | Yes | Unknown |
| Mississippi | 7 | Jul 22 | not notifiable | Yes | Unknown |
| Alaska | 5 | Jul 16 | 6 | No | Unknown |
| Rhode Island | 4 | Jul 17 | 6 | May have | No link found |
| South Dakota | 3 | Jul 16 | 3 | May have | Unknown |
| Louisiana | 1 | Jul 17 | 99 | Yes | Unknown |
| Utah | 1 | Jul 17 | 37 | No | No link found |
| Hawaii | 5, all travel | Aug 14 | not available | No | No link found |
| Delaware | no count published | — | 1 | May have | Unknown |
| Idaho | no count published | — | not notifiable | No | Unknown |
| Montana | no count published | — | 8 | No | Unknown |
| Nevada | no count published | — | not notifiable | No | Unknown |
| New Mexico | no count published | — | 9 | No | No link found |
| North Dakota | no count published | — | 4 | May have | Unknown |
| South Carolina | no count published | — | 45 | Yes | Unknown |
| Vermont | no count published | — | 3 | May have | Unknown |
| Wyoming | no count published | — | 0 | No | Unknown |
| All fifty states | 32,500 | 31 | 17 |
The season ends in six days and the counting does not
CDC treats May 1 through August 31 as the Cyclospora season. That is a calendar boundary and nothing more. With a six-week lag between the day somebody gets sick and the day they land in a federal total, illnesses that began in early August will still be arriving in October. Oklahoma put it as well as anyone last week, telling reporters that many of its newly reported cases are being added to previous weeks rather than to the current one.
The floor is 32,500 tonight and it is a floor, not an estimate. It counts only what fifty state health departments have published about themselves. CDC’s own literature puts the underdiagnosis multiplier for this parasite at roughly eighty-three to one, which would put the real number of people who got sick this summer somewhere near 1.4 million. That estimate comes from Scallan and colleagues, Foodborne Illness Acquired in the United States, Major Pathogens, published in Emerging Infectious Diseases in 2011, which puts the underdiagnosis multiplier for Cyclospora at 83.1. The people who quit buying salad were not overreacting to a number. They were reacting to the one nobody has printed.
The recall covered sixteen days of a season that had been running for months
One thing about this outbreak has bothered me since July, and I have not seen anyone write it down. The recall notice says the shredded iceberg product was distributed June 29 through July 16. CDC says the first illness in this outbreak began June 14. Cyclospora takes about a week to make somebody sick, so that person ate the lettuce around June 7 — three weeks before the first day of product anybody recalled. Both of those statements are on federal pages right now, and they cannot both be complete.
There is a reason for the June 29 date and it is arithmetic rather than epidemiology. Not one of the 236,192 cases in the recall carries a use-by date earlier than July 19, two days after the recall was announced. Lettuce cut in May or early June had already expired by July 17. It had been eaten. You cannot recall it, so it was not recalled. The front edge of this recall is the recall date minus the shelf life. It is not a finding about when the contamination started.
That raises the question nobody has asked out loud. Was the same plant shipping the same product to the same customers in May and June? Everything in the record says yes. The recalled lots span fourteen production days on six-day weeks, dark only on the two Sundays — a plant in the middle of a season, not one starting up. The Walmart Marketside entry alone is 109,476 cases across 61 distinct lot codes produced in sixteen days, and nobody onboards a private-label program for a national grocer and ships a hundred thousand cases in a supplier relationship two weeks old. And the company says on its own website that as of July 18 it temporarily suspended production of all products at the central Mexico facility. You suspend something that was running.
The import data says the same thing about the pipeline. USDA’s weekly iceberg lettuce shipment report carries a line for imports by truck from Mexico. In the last week of April 2025 it shows 260 units of ten thousand pounds — 2.6 million pounds of Mexican iceberg in a single week — with 11,015 units, about 110 million pounds, season to date, against 17,917 units for the entire prior season. Mexican iceberg crosses at Laredo and Pharr every day of the year, and Guanajuato is the part of Mexico closest to those crossings. That is a continuous supply stream. The recall is sixteen days of it.
Two honest limits on all of that. The USDA figures are commodity-level and name no company, so this is an argument about the pipeline the recalled lettuce moved through rather than proof about any one shipper. And I have not been able to confirm the calendar of the central Mexico iceberg season from a grower or a trade source; the April volumes and the company’s own suspension language both cut against a late-June start, but I would rather say what I have not confirmed than let somebody else say it for me.
The question stands, and it is a fair one with no accusation in it. How many cases of central Mexico iceberg lettuce left that plant between May 1 and June 29, and who bought them? The company knows to the case. FDA knows too, because every one of those shipments filed a prior notice at the border. Nobody has published the answer, and nobody has been asked for it in public.







