The top food safety risk factor depends on whether you’re looking at the big picture of outbreak data or at what goes wrong inside restaurants and kitchens. According to CDC outbreak surveillance from 2014 to 2022, food contaminated by an animal or environmental source before it ever reaches the kitchen is the single most common contributing factor, involved in 26% of outbreaks with an identified cause. At the retail and restaurant level, the FDA identifies five key risk factors, with poor personal hygiene, improper temperature control, and contaminated equipment consistently showing the lowest compliance rates.
The Biggest Factor: Contamination Before the Kitchen
When the CDC analyzed foodborne illness outbreaks reported between 2014 and 2022, contamination that happened before food arrived at its final point of preparation was the leading contributor. This means the food picked up harmful bacteria, viruses, or chemicals during growing, harvesting, processing, or transport. The trend is also getting worse: the proportion of outbreaks tied to this factor rose from 22.2% in the earliest reporting period to 32.3% in the most recent one.
This category covers a wide range of scenarios. Produce can be contaminated by irrigation water carrying pathogens. Poultry and meat can harbor Salmonella or other bacteria from the farm or slaughterhouse. Shellfish can accumulate toxins from the water they’re harvested in. In all these cases, the person cooking or serving the food didn’t cause the problem, but they may be the last line of defense against it.
The FDA’s Five Retail Risk Factors
The FDA takes a different angle by focusing on what happens inside food establishments. Through a multi-year study of more than 800 retail locations, the agency tracks compliance with five categories of risk factors that drive foodborne illness in restaurants, grocery stores, delis, and other food service operations. These are often called the “Big 5” of retail food safety:
- Poor personal hygiene, especially inadequate handwashing
- Improper holding temperatures, where food sits too long in the danger zone between 40°F and 140°F
- Inadequate cooking, where food isn’t heated enough to kill pathogens
- Contaminated equipment and food contact surfaces, including cutting boards, utensils, and prep tables
- Food from unsafe sources, meaning suppliers that lack proper food safety plans or certifications
The FDA’s 10-year trend analysis found that three of these five consistently had the lowest compliance: poor personal hygiene, improper holding temperatures, and contaminated equipment. While some improvement was observed over the study period, these three remained problem areas across most types of food establishments.
Why Handwashing Keeps Failing
Among the retail risk factors, poor personal hygiene stood out because of one specific behavior: handwashing. In facility types where personal hygiene compliance was low, the most common failure point was food workers not washing their hands properly or frequently enough. This matters enormously for viruses like norovirus, which is the leading cause of foodborne illness in the United States and spreads readily from person to person.
Research on norovirus transmission found that poor food-handling hygiene in the household had a population attributable risk of 47%, meaning nearly half of norovirus gastroenteritis cases in the study could theoretically have been prevented with better hygiene practices. Contact with a sick person was the primary transmission route, but contaminated hands turned that person-to-person spread into a food safety problem. When a food worker with norovirus, even without obvious symptoms, handles ready-to-eat food without washing their hands, the virus transfers directly to what you eat.
The Temperature Danger Zone
Bacteria that cause foodborne illness multiply rapidly when food sits between 40°F and 140°F. This range is called the danger zone, and it’s central to two of the FDA’s risk factors: improper holding and inadequate cooking. Hot foods need to stay above 140°F, cold foods below 40°F, and cooked foods need to be cooled from hot to refrigerator temperature within a specific window, typically two hours or less.
The FDA’s trend study found that while improper holding temperatures improved in five of nine facility types over the decade studied, compliance percentages remained low in several categories. Cooling cooked food is a particularly common failure point because it requires active management. A large pot of soup left on a counter, for example, can spend hours in the danger zone as it slowly drops in temperature, giving bacteria like Salmonella and Clostridium perfringens time to multiply to dangerous levels.
Cross-Contamination and Dirty Surfaces
Contaminated equipment and food contact surfaces create a bridge for pathogens to travel from raw ingredients to ready-to-eat food. The classic example is using the same cutting board for raw chicken and then for slicing vegetables without cleaning and sanitizing between uses. Systematic reviews of food safety research consistently find that cross-contamination from mishandling is one of the primary drivers of foodborne illness, alongside inadequate cooking and poor hygiene.
The FDA found statistically significant improvement in this risk factor in only one of nine facility types: full-service restaurants. In other settings like delis, cafeterias, and fast-food operations, contaminated surfaces remained a persistent issue. This is partly because it requires consistent behavior throughout a shift. Every time a food worker touches raw meat, switches tasks, or moves between stations, the potential for cross-contamination resets.
Unsafe Food Sources
Where food comes from matters as much as how it’s handled. Numerous outbreaks have been linked to food sourced from suppliers without proper safety controls. This risk factor applies to any operation that purchases ingredients, whether from large distributors or directly from local growers and producers.
Using a trusted supplier with a documented food safety plan, good agricultural practices, and appropriate state or federal certifications significantly lowers the chance of receiving contaminated ingredients. Buying directly from a grower or producer isn’t inherently risky, but it requires checking that the supplier follows basic food safety protocols. Without that step, a restaurant or food service operation may unknowingly introduce contaminated ingredients that no amount of proper handling downstream can fully correct.
How These Risk Factors Work Together
In practice, foodborne illness outbreaks rarely trace back to a single failure. Contaminated chicken from a supplier (unsafe source) gets handled by a worker who doesn’t wash hands afterward (poor hygiene), is placed on a prep surface that isn’t sanitized (contaminated equipment), and then sits at room temperature too long before serving (improper holding). Each individual lapse raises the risk; together, they make an outbreak likely.
The HACCP system, used across the food industry, addresses this by identifying critical control points where hazards can be prevented, eliminated, or reduced to safe levels. Cooking is one of the most important, since heating food to the right internal temperature kills most dangerous pathogens. But cooking can’t fix every problem. Toxins produced by bacteria that multiplied during improper holding, for example, may survive even thorough cooking. That’s why food safety depends on getting every step right, from sourcing through serving, rather than relying on any single safeguard.