2.1 Foodborne Illness, Outbreaks, and High-Risk Populations
Key Takeaways
- CDC estimates about 48 million U.S. foodborne illnesses, 128,000 hospitalizations, and 3,000 deaths each year.
- A foodborne outbreak is typically two or more people with a similar illness after eating the same food; one sick guest is an illness, not automatically an outbreak.
- USDA ERS estimated the cost of 15 major foodborne illnesses at $17.6 billion in 2018 dollars; its 2025 update puts total U.S. foodborne-illness cost at about $74.7 billion in 2023 dollars.
- High-risk groups include preschool-age children, older adults, pregnant people, and immunocompromised persons; Food Code HSP facilities include hospitals, nursing homes, daycare, and assisted living.
- The five CDC/FDA retail risk factors are food from unsafe sources, inadequate cooking, improper holding, contaminated equipment, and poor personal hygiene.
A foodborne illness is a sickness caused by eating or drinking contaminated food or beverage. The contaminant may be a living pathogen, a toxin that organism produced, a chemical, or a physical object. One confirmed sick guest is a foodborne illness. It is not automatically an outbreak.
A foodborne outbreak is typically two or more people who have a similar illness after eating the same food or sharing another common exposure. CDC uses that two-or-more framing in outbreak surveillance. A single laboratory-confirmed case of certain rare, high-severity illnesses can still trigger a public-health investigation, but the CFPM exam trap is simpler: one sick guest is an illness, not automatically an outbreak.
The Public-Health Burden
CDC estimates that each year about 48 million people in the United States get sick from a foodborne illness, 128,000 are hospitalized, and 3,000 die. Those figures are estimates, not a census of reported cases. Most illnesses never receive a laboratory diagnosis, so the published burden is inferred from surveillance systems rather than from every guest who felt sick after dinner.
The dollar cost is also an estimate, and published totals depend on the year and the method. USDA Economic Research Service (ERS) estimated the cost of 15 major foodborne illnesses at $17.6 billion in 2018 dollars — the figure Mississippi State University Extension publication P4137 reprints in CFPM teaching materials. ERS's 2025 update widened the model to 31 pathogens and put the total U.S. cost at about $74.7 billion in 2023 dollars. Do not treat either number as a single official "true" cost. Treat them as sourced estimates that explain why regulators, insurers, and plaintiffs take outbreaks seriously.
| Source | What it estimates | Figure |
|---|---|---|
| CDC foodborne-illness burden | Annual U.S. illnesses / hospitalizations / deaths | About 48 million / 128,000 / 3,000 |
| USDA ERS (2018 dollars; 15 major pathogens) | Cost of major foodborne illnesses | $17.6 billion |
| USDA ERS 2025 update (2023 dollars; 31 pathogens) | Total U.S. foodborne-illness cost | About $74.7 billion |
What the exam wants is not a memorized spreadsheet. It wants you to know that foodborne illness is common, under-reported, expensive, and concentrated in preventable retail failures a certified manager is supposed to control.
High-Risk People and HSP Facilities
Not every guest faces the same risk of severe disease. FDA and CDC consumer guidance treat these groups as high-risk:
- Preschool-age children — immune systems still developing; smaller body mass; higher pathogen dose per kilogram
- Older adults — weaker immune response and more chronic disease
- Pregnant people — immune and hormonal changes; Listeria monocytogenes can infect the fetus
- Immunocompromised people — cancer treatment, organ transplant, HIV, some chronic diseases, and high-dose steroids
The FDA Food Code adds a facility overlay. A highly susceptible population (HSP) is those vulnerable people when they obtain food at a facility that provides custodial care, health care, assisted living, or similar services. HSP facilities include hospitals, nursing homes, child or adult daycare, kidney dialysis centers, and senior centers. In those settings the Code is stricter: no bare-hand contact with ready-to-eat food, no raw seed sprouts, and pasteurized juices and eggs are required.
A healthy adult at a sports bar can still get norovirus. The difference is usually severity. The same leftover rice or undercooked hamburger that gives one guest a bad night can hospitalize a toddler, a chemotherapy patient, or a nursing-home resident.
In Practice
You manage a café that also caters a hospital gift-shop kiosk and a preschool lunch. Café guests are the general public. The kiosk and the preschool are HSP operations. Do not serve the same undercooked "customer-requested" burger or raw-sprout sandwich in all three places. The Code and the exam both expect you to raise the control level when the eater cannot tolerate a mistake.
Ready-to-Eat and TCS Foods Raise the Stakes
Ready-to-eat (RTE) food will be eaten without another cook step that would kill pathogens — sliced melon, deli meat, garnishes, plated salads, and bread after it leaves the oven. Time/temperature control for safety (TCS) food supports rapid pathogen growth or toxin formation if time and temperature are abused. When a food is both RTE and TCS, there is no later kill step and the food is a growth medium. That combination is why buffet melon, leftover rice, and salsa made from cut tomatoes appear so often in outbreak reports.
Five Risk-Factor Failures Inspectors See
CDC and FDA organize most retail outbreaks around five risk factors. Inspectors look for them on every visit, and Active Managerial Control is built to stop them.
| Risk factor | What it looks like on the line | Why people get sick |
|---|---|---|
| Food from unsafe sources | Shellfish without tags; meat from an unapproved vendor; home-canned salsa | Pathogens or toxins arrive already in the food |
| Inadequate cooking | Chicken pulled at 150°F; undercooked ground beef | Pathogens that cooking should have killed survive |
| Improper holding | Soup at 120°F; cut melon left at room temperature | Bacteria multiply or toxins form in the temperature danger zone |
| Contaminated equipment | Same board for raw chicken and salad; a dirty slicer | Pathogens move onto food that will not be recooked |
| Poor personal hygiene | An ill cook on the line; skipped handwashing after the restroom | People are the usual source of norovirus, Staphylococcus aureus, and Shigella |
If you can name these five and show how you stop each one, you are doing the job the certificate is supposed to prove. Later chapters turn each factor into procedures. This chapter is the reason those procedures exist.
Three Types of Contamination
| Type | Examples | Typical control |
|---|---|---|
| Biological | Bacteria, viruses, parasites, biological toxins | Time/temperature, cooking, handwashing, exclusion of ill workers |
| Chemical | Sanitizer in a beverage, pesticide residue, toxic-metal leaching | Labeled chemical storage, food-grade equipment, measured sanitizer |
| Physical | Glass, metal shavings, bandages, bones, jewelry | Premises repair, jewelry policy, product inspection |
Most exam items about "contamination" mean biological contamination unless the stem names a chemical or a foreign object. An outbreak can start from any of the three, but the five risk factors above are almost always biological-control failures.
What an Outbreak Costs a Restaurant
Even a small cluster can empty a dining room. Direct costs include discarded food, overtime, a required deep clean, medical claims, and legal defense. Indirect costs include lost reservations, damaged reviews, higher insurance, and staff who quit. The health department may require a hold on food, a sanitizing protocol, or a temporary closure. Repeat risk-factor violations can put the permit at risk. Published restaurant-specific "average lawsuit" figures vary by study and year; this guide does not invent a single official dollar loss. Know the cost categories and that prevention is cheaper than response.
Exam Trap: One Sick Guest
If one diner calls to say they vomited after dinner, that is a foodborne illness report. It is not automatically an outbreak. It still requires a serious response: take the complaint, preserve leftover food if available, review the employee health log, check temperatures and the implicated menu items, and cooperate if the health department calls. Do not wait for a second complaint before you investigate. Do not tell the guest that one case "does not count." Two similar illnesses linked to the same chicken salad do meet the outbreak threshold — and that is the distinction the exam will test.
A health department calls after two wedding guests report vomiting and diarrhea. Both ate the same chicken salad. How should the Person in Charge classify this event?
Which group is treated as a highly susceptible population in an FDA Food Code HSP facility?
One guest reports vomiting six hours after dining. No other complaints have come in. The correct classification is: