Normalization of deviance: The real lesson of this summer’s Cyclospora outbreak

The Outbreak
By now most of us have seen the numbers. As of this week, the CDC has confirmed more than 6,000 cyclosporiasis cases tied to a single multistate outbreak; state-by-state totals reported independently put the real figure well over 20,000. It is, by any measure, one of the largest outbreaks of its kind on record.

Food Safety News publisher Bill Marler wrote something that stuck with me more than the case counts did. He pointed out that the FDA had flagged this exact risk before, at the same corporate family, at a different facility, thirteen years earlier, after a 2013 Cyclospora outbreak. The agency’s own environmental assessment recommended the company test its water and re-evaluate its produce wash step. According to Marler’s reporting, there is no public record that verification ever happened.

Thirteen years passed. Nothing catastrophic occurred in the interim. Until this year, when it did, at a scale few outbreaks reach. That is not a story about something being missed. It is a story about something being known, and quietly stopping being treated as a risk, because nothing visibly bad happened for a long time.

There is a name for that pattern, and it comes from a very different disaster.

What Challenger actually teaches
In 1986, the Space Shuttle Challenger broke apart 73 seconds after launch. The cause was O-ring seals that failed in cold weather. What made it a scandal, rather than just a tragedy, is that engineers had flagged O-ring erosion on multiple previous flights. Each time, the shuttle launched anyway, and nothing catastrophic followed.

Sociologist Diane Vaughan, studying the disaster afterward, coined a term for what happened next: normalization of deviance. The process by which a known deviation from a safety standard gets quietly reclassified as acceptable, not because anyone decided it was safe, but because it kept not causing a disaster. The risk didn’t disappear. It just stopped being treated as one.

The term has since become standard vocabulary in aviation safety, nuclear safety, and patient safety literature, precisely because the pattern keeps recurring: a known risk, documented, unresolved, tolerated because the bad outcome hasn’t happened yet – until the day it does. 20,000 or more bad outcomes in this case, to date.

The version of this sitting in the glove industry right now
I run a food-safety glove company, and I think the glove industry has a normalization-of-deviance problem, and it’s been in the public record for two years without creating change.

In 2024, a peer-reviewed study in the Journal of Food Protection tested 2,800 food and examination grade gloves across 26 commercial brands. From the paper – “around 50 percent of samples contained fecal indicator organisms.”

“Frank and opportunistic pathogens were identified on tested gloves, including recognized fecal indicators, enterotoxigenic strains of Bacillus cereus and B. anthracis along with the presence of Listeria monocytogenes, Clostridoides difficile, Staphylococcus aureus, Pseudomonas aeruginosa, and Streptococcus pneumoniae…” As with Cyclospora, the origin was likely contaminated water – in this case at the manufacturing plants in SE Asia.

All samples were stated as “FDA Compliant.” FDA’s compliance pathway for gloves (21 CFR 177) tests whether the raw material chemical content is safe to touch food. It does not test whether the glove itself is sanitary, even though FDA’s own manufacturing standard (21 CFR 117.10(b)(5)) requires gloves to be “intact, clean, and sanitary.” That’s not a hidden gap. It’s published, peer-reviewed, and two years old. We raised it formally with the Conference for Food Protection, the body that reconciles exactly this kind of regulatory contradiction; the Council declined to act, ruling it outside the Conference’s scope, and it won’t be reconsidered until 2027.

We also petitioned FDA directly in November 2025 to address the underlying material standard for vinyl gloves. Both are public record.

No known outbreak has been publicly attributed to a contaminated glove yet. Under normalization of deviance, that fact means precisely nothing about whether the risk is real. It means the industry hasn’t yet had its version of a cold morning in January. The absence of a headline is not evidence of safety.

It’s the condition under which a known risk gets tolerated, right up until it isn’t.

What this isn’t, and what it is
We need to be careful here, because it would be easy to overreach. We are not claiming Cyclospora has been found on gloves; it hasn’t, and the biology makes that unlikely. This isn’t a claim about one pathogen. It’s a claim about a pattern: known risk, no verification requirement, tolerated by default until something forces the question.

What this outbreak actually demonstrates, more than any specific pathogen, is how expensive that pattern gets once it resolves. Tens of thousands of illnesses, a supply chain under scrutiny, a regulator facing hard questions about what it knew and when. Nobody sets out for this. It happens by default, when a known and documented risk is left unverified long enough.

Food manufacturing, processing, and service all use gloves as a deliberate barrier against exactly this category of contamination. That’s the entire point of the product. The question worth asking isn’t whether your gloves are FDA compliant. It’s whether anyone has verified they are sanitary. For most gloves on the market today, the honest answer is probably not, and nobody has checked.

Maybe we will have to wait years for something to happen as a result of a contaminated glove. But the fact remains that the glove that is supposed to be a barrier to the fecal-oral contamination route may in fact turn out to be the bridge.

Sources
Publisher’s Platform: The FDA closed the 2024 romaine E. coli outbreak without naming Taylor Farms… – Bill Marler, Food Safety News, July 29, 2026

Publisher’s Platform: The Fifty-State Cyclospora count is 20,927 this morning. Bill Marler

Investigation Update: Cyclospora Outbreak, July 2026 – CDC

Journal of Food Protection, 2024 – Potential for Glove Risk Amplification via Direct Physical,

Chemical, and Microbiological Contamination.

About the author: Steve Ardagh is founder and CEO Eagle Protect PBC, the only U.S. glove supply company to conduct proprietary independent glove testing and verification of their range of gloves. With gloves a known microbial contamination source, Ardagh continues to appear in podcasts and food safety publications advocating for increased glove food safety verification. He is actively pursuing a regulatory change of food-compliant gloves to include testing and verification for microbial contamination and glove defects – neither of which are currently included.