How One Salad Supplier Became a Single Point of Failure

Bar chart comparing 2026 US cyclosporiasis case counts against a typical full year, showing 6,744 cases confirmed or under investigation since May 1 versus a normal annual high of 1,000.

Taylor Farms built a $7 billion business on the 24 hours after harvest. The same step that creates the margin is the step that turned one region’s lettuce into a five-state outbreak.

Taylor Farms recalled all iceberg lettuce grown in central Mexico on July 17 after federal investigators traced a cyclosporiasis outbreak to shredded lettuce served at Taco Bell. The CDC has confirmed 1,644 cases across five states, with 94 hospitalizations. Nationally, roughly 6,700 cases are confirmed or under investigation since May 1, against a typical full-year total of 200 to 1,000.

Almost nobody who got sick had heard of the company that made them sick. That is not an accident of media coverage. It is the shape of the business. Taylor Farms does not put its name on the Taco Bell taco, the McDonald’s shredded lettuce, the Olive Garden salad or the Walmart Marketside bag. It sits one layer upstream of all of them, converting a commodity nobody can charge a premium for into a convenience product everybody can. That position is where the money is. It is also where the risk concentrates.

What Happened

On July 17, Taylor Farms de Mexico of Guanajuato voluntarily removed all iceberg lettuce sourced from central Mexico from the U.S. market and initiated a recall. The recall covered food-service product plus Walmart’s Marketside-brand iceberg salad and shredded lettuce carrying best-if-used-by dates from July 18 to August 3. Taco Bell went further than the FDA advisory required and pulled Taylor Farms lettuce from its entire nationwide supply chain, not just the five affected states.

The CDC’s count stands at 1,644 laboratory-confirmed infections in Indiana, Kentucky, Michigan, Ohio and West Virginia, with illness onsets running from May 13 to July 13. Michigan health officials analyzed food exposure details from 190 interviewed cases and found that 90% had eaten iceberg lettuce. There have been 94 hospitalizations and no deaths.

Then the investigation got messier. On July 19, the FDA re-reviewed its one positive lettuce sample and reported it as a false positive. As of that date there were no confirmed positive product samples anywhere in the investigation. The agency did not clear Taylor Farms. It said the traceback and the epidemiological data still converge on shredded iceberg lettuce from its central Mexico operations, and that the false positive does not change the basis for the recall.

That distinction matters more than it sounds, and we come back to it below.

The Backstory

Bruce Taylor is a third-generation Salinas lettuce grower who founded Taylor Farms in 1995. He has said he would have been happy to reach $100 million in annual revenue. The company is now over $7 billion, with about 24,000 employees and 22 production and distribution facilities across North America, shipping up to 160 million servings of finished produce every week.

How One Salad Supplier Became a Single Point of Failure

It got there by not growing most of its own lettuce. Roughly 85% of the produce Taylor Farms sells comes from farmers under contract. Taylor’s structural innovation was turning leafy greens into a fixed-price business: growers get a guaranteed profit, customers get consistent supply and predictable cost, and Taylor Farms takes the middle.

The result is a market with very few doors. Taylor Farms, Chiquita’s Fresh Express and the private-equity-owned Organic Girl control the majority of an estimated $15 billion North American salad market. Taylor Farms alone has supplied salad bags to Whole Foods, shredded lettuce to McDonald’s and Chipotle, iceberg to Olive Garden, and value-added product to Kroger, Walmart, Costco and Trader Joe’s.

This is not the company’s first outbreak either. Taylor Farms product was linked to E. coli cases tied to slivered onions in 2024 and to cyclospora in lettuce in 2013.

The Plan

Taylor Farms says the recall is complete, product has been pulled from the market, and it will not source central Mexico iceberg for the remainder of the growing season. It has investigators on site in Guanajuato looking for the contamination source and says it is working with the FDA, CDC and state authorities.

Note what the company could not do: isolate a lot. It pulled an entire region’s season. When you cannot identify which field or which day failed, the only lever available is the blunt one, and the cost of pulling a region is a cost the processor absorbs whether or not it was ever at fault.

Taco Bell’s response is the more revealing one. It removed the supplier nationwide within days, in states with no reported cases. In a category with three dominant processors and low switching costs at the SKU level, a customer can reprice its relationship with a supplier faster than a regulator can finish an investigation.

The Business Model Angle

Growing lettuce is a bad business. It is a commodity, growers are price takers, and weather and pests set the terms. Nobody has ever built a $7 billion enterprise on selling heads of iceberg.

The value in leafy greens is created almost entirely in the 24 hours after harvest. Wash it in chilled water, cut it, blend it, bag it under a modified atmosphere, route it through a cold chain and put it in front of a consumer who will pay several times the commodity price for the fact that it is ready to eat. That conversion step is the product. Everything before it is an input.

Taylor Farms owns the conversion step and almost none of the farmland. That is a genuinely elegant model. Contract growers carry the agronomic risk in exchange for a guaranteed fixed price. Taylor Farms carries no crop exposure, captures the processing margin and owns the relationships with the buyers who actually matter. It is asset-light in exactly the place where assets are unattractive and asset-heavy in exactly the place where scale compounds.

Here is the part the WSJ logistics framing walks past. Aggregation is what creates the margin, and aggregation is what creates the blast radius.

A whole head of contaminated lettuce sickens one household. A head of contaminated lettuce shredded into a processing stream that ships 160 million servings a week is instantly blended, bagged, distributed and served across multiple states, multiple restaurant brands and multiple retail channels before anyone has symptoms. The economics of the model and the epidemiology of the model are the same mechanism, viewed from two sides.

And that mechanism sits underneath brands that compete with each other on everything else. Taco Bell, McDonald’s, Chipotle, Olive Garden, Walmart, Costco and Kroger differentiate on menu, price, brand and experience. Upstream, some of them share a node. The franchise-heavy quick-service model is built on outsourcing capital and operations to franchisees and suppliers, which is precisely why it produces such attractive returns. What gets outsourced along with the prep work is the contamination surface.

So the value capture and the reputational damage flow in opposite directions. Taylor Farms captures the margin on the shredded lettuce. Taco Bell’s name is the one in every headline. That asymmetry is the actual business story here, and it is not priced into anyone’s supplier agreement.

The Risk

The uncomfortable part is that this is not a quality-control failure that better testing fixes.

Cyclospora is a parasite, not a bacterium. Standard chlorinated produce washes are designed for bacterial loads and are not considered reliable against it. Cooking to 158 degrees Fahrenheit kills it, which is useless for a product whose entire value proposition is that you do not cook it. And with a shelf life measured in days, the product is eaten long before a lab result comes back. The FDA has zero confirmed positive product samples in this investigation and is still fairly confident it knows the source, because the system runs on epidemiology after the fact rather than QA before it.

The honest counterargument is worth stating plainly: concentration is also why this got solved. Traceback converged on a single supplier within weeks because there was a single supplier to converge on. A fragmented market of hundreds of small regional processors would make attribution nearly impossible, and the outbreak would run longer and quieter. Concentration is the amplifier and the diagnostic at the same time. You do not get one without the other.

The risks that actually threaten the model are narrower. First, category demand: consumers spooked off bagged salad abandon the highest-margin SKUs first, not the commodity heads. Second, customer concentration in reverse, since Taco Bell demonstrated that a large buyer can exit a supplier nationwide in days. Third, sourcing geography, because pulling central Mexico for a season means finding acreage elsewhere at a price that still supports fixed grower contracts.

Quick Questions

Did the FDA clear Taylor Farms? No. The FDA said one lab sample was a false positive and that as of July 19 there were no confirmed positive product samples. It also said this does not change its conclusion, and that traceback and outbreak data still point to shredded iceberg from its central Mexico locations.

How unusual is this outbreak? Very. A typical year sees roughly 200 to 1,000 U.S. cyclosporiasis cases. Around 6,700 are confirmed or under investigation since May 1 alone, and health officials believe multiple separate outbreaks are running in at least 34 states.

Is bagged salad generally safe? The CDC said shredded lettuce sold in grocery stores and served at other restaurants is not affected by this specific recall, and Taylor Farms said no Taylor Farms branded salad kits contain iceberg lettuce. Recalled product should be discarded.

Why is one company this large? Because processing scale is the moat. Three companies control most of the roughly $15 billion North American salad market, and the capital and cold-chain requirements of value-added produce make that hard to challenge from below.

Who actually pays for an outbreak like this? Financially, the processor and its insurers. Reputationally, the consumer-facing brands, which is the mismatch at the center of the model.

The Business Model Analyst Take

The instinct after an outbreak is to treat it as an operational failure by one company. This one is closer to a feature of a structure that has been rewarded for thirty years.

Taylor Farms found the one profitable step in an unprofitable supply chain and built a machine around it. That machine works because it aggregates: hundreds of contract farms in, standardized servings out, at a scale that lets Walmart and Taco Bell buy from the same plant. Every efficiency in that design is also a coupling. You cannot decentralize the risk without decentralizing the margin.

Which leaves the interesting question pointed at the buyers rather than the supplier. If your brand carries the full reputational cost of a failure in a supplier your customers cannot name, you have an unpriced liability sitting in your cost of goods. Chipotle learned a version of that lesson in 2015 and rebuilt around it. Most of the industry did not. The bill for a shared upstream node arrives at every brand on the shelf at the same time, and it arrives in a currency nobody hedged.

Reporting from The Wall Street Journal, plus CDC and FDA outbreak investigation updates, Forbes, CNN, NBC News, CBS News and company statements.

UNLOCK THIS FREE DOWNLOAD

DOWNLOAD NOW

Fill Your E-mail to Receive this Download Directly in Your Inbox.

RECEIVE OUR UPDATES

The Biz Model Club

Get daily, no-fluff insights on the latest business models, startup strategies, and trends delivered straight to your inbox.