The Centers for Disease Control and Prevention has declared the Salmonella Javiana outbreak over after 488 confirmed infections across 34 states, with 65 hospitalizations and no deaths recorded between June and August 2026.

What did the traceback find?

Epidemiological and traceback evidence identified fresh jalapeños imported from Sinaloa, Mexico, and distributed by Coast Citrus Distributors as the source of the pathogen, according to the CDC and the Food and Drug Administration. The distributor recalled whole peppers, and downstream customers who incorporated the peppers into prepared products issued subsequent recalls.

The 488-patient count almost certainly understates true exposure. The CDC estimates that for every confirmed Salmonella case in an outbreak investigation, roughly 29 additional infections go undetected because patients do not seek care or providers do not test specifically for the organism. Applied to the 488 confirmed cases, the agency estimates the actual case count exceeded 14,000.

Patient ages ranged from less than 1 to 85 years, with a median age of 31. Illness onset dates ran from June 16 through Aug. 26, peaking July 5, when 38 people fell ill.

How extensive was restaurant exposure?

Of 308 patients interviewed, 281 — roughly 91 percent — reported eating at a Mexican-style restaurant before becoming ill, with meal dates spanning June 14 to July 29. Investigators identified 36 illness clusters at 31 Chipotle Mexican Grill locations across seven states and at five QDOBA locations in two states.

Commonly reported ingredient items among those clusters included:

• Jalapeño pepper
• Red onion
• Cilantro
• Avocado

The convergence on jalapeños as the shared vehicle — rather than the onion, cilantro or avocado — narrowed the traceback to a single commodity and a single shipper from Sinaloa.

Why couldn't the FDA identify a contamination point?

FDA staff inspected a common Mexican distributor identified through traceback, though the agency declined to name the company. The inspection covered operational observation, record review, and sample collection. No jalapeños were available for sampling at the time of the visit, and all environmental samples came back negative for Salmonella. The agency concluded it could not determine a route or source of contamination for the outbreak.

That regulatory dead end leaves open questions for operators sourcing from the same growing region. Even with a confirmed epidemiological link to a named shipper, federal investigators did not document the mechanism by which the peppers carried Salmonella into restaurant supply chains.

What is the operator takeaway?

For chains buying fresh produce from Sinaloa, the outbreak illustrates the cost-concentration risk in single-commodity, single-region sourcing. When a jalapeño recall hits, menu items across an entire concept — burrito build lines, salsa service, prepared sides — face removal, and the brand exposure compounds because case clusters map directly to named locations.

The episode also exposes the limits of federal traceback. Investigators traced contamination to a Mexican distributor the FDA will not name, and environmental sampling produced no positives. Operators relying on supplier audits rather than internal produce testing may face the same information gaps when the next outbreak investigation begins.

The CDC has not announced follow-up surveillance or importer-of-record requirements tied to this outbreak, leaving the next contamination event to retrigger the same investigative sequence.