Three hundred and forty-five people got sick. Twenty-seven states are on the map. And the culprit is a little green pepper you probably scooped onto your burrito bowl without thinking twice about it. The CDC and FDA spent weeks chasing this one down, and on August 5, 2026, they finally put a name on it: jalapeños. Not the chicken, not the rice, not the mystery guac. The peppers.
If you eat at Chipotle or Qdoba even semi-regularly, this is the kind of headline that makes you stare at your last receipt. So here’s the whole story, without the panic and without the runaround.
The pepper nobody thought to blame
When the FDA started digging into this back on July 22, they weren’t looking at jalapeños at all. They said they were investigating “multiple ingredients” and refused to name a single restaurant or supplier. For two weeks, nobody knew if it was the onions, the cilantro, the avocado, or something else entirely. All four of those showed up on the list of commonly eaten items.
The specific bug here is Salmonella Javiana, which is one of hundreds of salmonella types out there. What matters for you is the timeline. The first person got sick on June 19, 2026, and the last reported illness started July 20. So this was quietly spreading for a solid month before most people ever heard a word about it. That slow burn is exactly why it took investigators so long to point at the jalapeños.
Where these jalapeños actually came from
This is where it gets specific. The peppers were grown in Sinaloa, Mexico, and traced back to one common grower. From there they went to a California company called Coast Citrus Distributors, which shipped them out to restaurants, wholesalers, and food service companies around the country. The FDA ran a traceback based on where sick people said they ate, and every road led back to that same grower.
Coast Citrus agreed to recall whatever product was still out there and started calling its customers. That’s the important part to understand. The recall is on the distributor’s peppers, not on any one restaurant chain. Chipotle and Qdoba were just two big names that happened to buy from the same source, which is how they ended up in the headline instead of the dozens of smaller Mexican-style spots that also got sick customers.
Minnesota and Colorado took the worst of it
The 345 cases are not spread evenly. Two states got absolutely hammered. Minnesota and Colorado each reported 110 cases, which together make up nearly two-thirds of everyone who got sick. After that the numbers drop off a cliff: Illinois had 30 cases, Kansas had 13, and the other 23 states are sitting with smaller counts each.
Minnesota was actually the state that cracked this thing open. Their health department flagged 110 people who got sick, and the majority of those folks said they’d eaten at Chipotle between June 14 and July 14. State epidemiologists connected the dots and passed it up the chain. The rest of the map filled in fast after that. The full list of affected states runs from Alabama and Arkansas all the way to Wyoming, hitting Texas, Ohio, Washington, Virginia, and a bunch in between.
Chipotle saw the numbers and yanked the peppers
Give Chipotle this much: they moved before they were forced to. The company said it has a traceability system that let it spot jalapeños from a single common lot as a possible shared ingredient right after learning about the investigation. On August 4, they pulled the peppers from restaurants and swapped in product from different growers. Their food safety officer, Laurie Schalow, called it a proactive move made “out of an abundance of caution.”
Wall Street didn’t take it gently. Chipotle shares dropped more than 8% on the day the news broke. The company officially switched jalapeño suppliers nationwide starting July 20. Qdoba took a slightly different route and just stopped serving jalapeños altogether on July 28. Because both chains got the peppers out of their kitchens, the CDC and FDA now say neither one is considered a current ongoing risk. In plain English: the bad peppers aren’t in those restaurants anymore.
The menu items where jalapeños were hiding
Here’s something a lot of people don’t realize. You don’t have to order a scoop of jalapeños to have eaten them. At Chipotle, the peppers show up in several menu items whether you asked for them or not. They’re in the chili-corn salsa, the pico de gallo, and the guacamole. So if you built a bowl in June or early July and grabbed any of those, you got jalapeño in the mix without picking it off a menu.
That’s a big reason this outbreak got as wide as it did. Jalapeños aren’t a niche add-on at these places. They’re baked into the standard stuff most people order on autopilot. When investigators interviewed sick people, jalapeño peppers kept coming up alongside red onion, cilantro, and avocado, which made sense once you know all four ride together in the same salsas and sides.
The grocery store question nobody can answer yet
This is the loose thread. Right now it doesn’t look like Coast Citrus was selling these jalapeños straight to grocery stores. They mostly went to restaurants and wholesalers. But the FDA has openly said it’s still working to map out the full distribution, which means the door isn’t fully closed on retail.
If it turns out some of those peppers did land on store shelves, the FDA said it may post additional recalls on its recalls page. So if you’re the type who buys fresh jalapeños by the handful at the supermarket, it’s worth keeping half an eye on that. As of the August announcement, though, this was a restaurant-and-wholesale problem, not a produce-aisle one.
Why the real number is almost certainly higher
The 345 figure sounds precise, but it’s really a floor, not a ceiling. The CDC flat-out said the true count is likely much higher. The reason is simple. Most people who get a bad stomach bug ride it out at home, never see a doctor, and never get tested. If you don’t have a lab result, you don’t get counted.
There’s also a reporting lag. It usually takes three to four weeks to confirm whether a sick person belongs to an outbreak, so recent cases are still trickling in. Of the 191 people investigators actually interviewed, 177 of them, or 93%, said they’d eaten at a Mexican-style restaurant before getting sick. That’s a wildly high number for a food link, and it’s exactly the kind of pattern that lets officials say they’re confident about the source. Thirty-six people ended up hospitalized, and there have been no confirmed deaths reported by the FDA in this one.
If you’ve still got these jalapeños at home
Since the recalled peppers went to restaurants and wholesalers, the average home cook probably isn’t sitting on a bag of them. But the official advice is straightforward if you think you might be. The recalled fresh jalapeños from Sinaloa distributed by Coast Citrus should not be eaten, served, or sold. Toss them. And clean any surfaces or containers they touched, because cross-contamination is how a single bad pepper turns into a bigger mess.
Salmonella symptoms usually show up somewhere between 12 and 72 hours after eating contaminated food, and they tend to run their course in about four to seven days. If you ate somewhere in that mid-June to mid-July window and remember piling on the salsa, that’s the timeline to keep in the back of your mind. Anyone who thinks they got sick from it should reach out to their own healthcare provider.
The upshot is that the peppers causing all this are already out of Chipotle and Qdoba, and the distributor pulled its remaining stock. The investigation isn’t wrapped up, and the case count could keep climbing as slow reports come in, but the source has a name now. For a burrito chain that has been through the food-safety wringer before, moving fast on this one was the only smart play they had. Keep an eye on that FDA recalls page if you buy fresh jalapeños at the store, and otherwise your next bowl is fine.
