Cryptosporidium is found in water, soil, food, animals, and on contaminated surfaces. This microscopic parasite thrives in an unusually wide range of environments because its infectious form, called an oocyst, has a tough outer shell that resists chlorine, cold temperatures, and months of exposure to the elements. Globally, it causes tens of millions of infections each year, with the heaviest burden in sub-Saharan Africa and South Asia.
Recreational Water
Swimming pools, water parks, splash pads, and interactive fountains are among the most common settings for Cryptosporidium outbreaks. The parasite has become the leading cause of recreational water outbreaks reported in the United States, and the reason is simple: standard chlorine levels don’t kill it. Oocysts can survive for more than seven days in water treated with 1 part per million of free chlorine at typical pool temperatures. That means even a well-maintained pool can harbor the parasite after a single contaminated swimmer enters the water.
Splash pads and interactive water play areas carry extra risk. Their design sprays and jets water into the air, which strips out chlorine faster than in a still pool. Young children, who are the primary users, frequently place their open mouths on the water jets and swallow more water than adults do. Public health guidelines now recommend that splash pads use ultraviolet light or ozone treatment to reduce Cryptosporidium by 99.9%, a more stringent standard than for regular pools.
Lakes, rivers, and other untreated natural water bodies also harbor Cryptosporidium, often from agricultural runoff or sewage contamination. Swallowing even a small amount of lake water during swimming can be enough to cause infection.
Drinking Water
Contaminated drinking water is one of the most significant transmission routes worldwide. The burden falls disproportionately on developing countries, where limited access to safe water and adequate sanitation allows widespread transmission. In high-income countries, modern water treatment plants use filtration and UV disinfection to remove or inactivate oocysts, but smaller or older systems that rely primarily on chlorination can be vulnerable. The parasite’s chlorine resistance is the core problem: treatments that eliminate bacteria and most viruses leave Cryptosporidium intact.
Outbreaks in municipal water supplies have been traced to contamination of water catchments by cattle manure. Farm livestock, particularly cattle and sheep, shed the same species of Cryptosporidium found in human infections, and runoff from grazing land can carry oocysts directly into reservoirs and rivers.
Livestock and Animals
Cattle are the single most important animal reservoir. Four species of Cryptosporidium are commonly found in cattle, but the one that causes disease in humans, C. parvum, is most heavily shed by young calves. An infected calf can release more than 10 billion oocysts per day, and those oocysts are immediately infectious. Sheep also carry and shed C. parvum. Research on shared grazing land has shown that livestock and local wildlife carry the same genetic subtypes of the parasite, confirming that transmission flows between species and into nearby water supplies.
Beyond farm animals, Cryptosporidium has been detected in goats, pigs, horses, dogs, cats, deer, and rodents. People who work with animals, especially on dairy farms and at petting zoos, face higher exposure risk through direct contact with feces or contaminated bedding.
Food
Cryptosporidium contaminates food through several routes: infected food handlers, irrigation with contaminated water, and the use of animal manure as fertilizer. Among documented foodborne outbreaks, roughly 41% involved raw (unpasteurized) milk and about 18% involved unpasteurized apple cider. Salad ingredients appeared in 35% of outbreak reports.
Leafy greens are a recurring culprit. Testing of packaged salad greens in Canada found Cryptosporidium oocysts in nearly 6% of samples, including radicchio, endive, romaine lettuce, and baby lettuce. In Nigeria, 48% of lettuce samples tested positive. Outbreaks in Scandinavia have been linked to contaminated arugula, parsley, and unprocessed spinach juice. A cafeteria outbreak in Denmark sickened 75 people after an infected food handler contaminated salads.
Pasteurization kills the parasite, which is why raw milk and fresh-pressed juices pose a risk that their processed counterparts do not. Thorough washing of produce reduces but may not completely eliminate oocysts from surfaces.
Soil and the Environment
Cryptosporidium oocysts persist in soil for months, especially in cool, moist conditions. In loam and clay soils held near refrigerator temperature (around 40°F), the parasite degrades so slowly that eliminating 99.99% of oocysts would take well over a year. Warmer temperatures speed up die-off: at roughly 85°F, oocysts break down about 14 times faster than they do in cold soil. Drying is even more effective. Dry soil at 90°F reduced oocyst levels by 99.9% in just 10 days, while saturated soil at the same temperature achieved only a 90% reduction.
In water, survival is similarly long. At cold temperatures, models estimate it would take nearly two years to inactivate 99.9% of oocysts. Freezing does eventually kill them, but slowly: it takes roughly two months at about 25°F below zero to eliminate 99.99% of oocysts. This environmental toughness is why the parasite accumulates in soil around farms, in sediment at the bottom of reservoirs, and on surfaces in places where infected people or animals have been.
Childcare Settings and Person-to-Person Spread
Cryptosporidium spreads readily from person to person through the fecal-oral route, and childcare centers are a well-known hotspot. An infected person sheds millions of oocysts in their stool, and it takes swallowing only a tiny number to become sick. Young children in diapers, who frequently put hands and objects in their mouths, create ideal conditions for transmission. Importantly, alcohol-based hand sanitizers do not kill Cryptosporidium. Only handwashing with soap and running water effectively removes oocysts from skin.
Children diagnosed with Cryptosporidium infection are advised to stay home until diarrhea stops and to avoid swimming or water play for an additional two weeks after symptoms resolve, since they continue shedding the parasite during that window.
Geographic Spread
Cryptosporidium is found on every continent. The highest infection rates occur in sub-Saharan Africa and South Asia, where 10% to 20% of children under five test positive. In the United States, about 7,500 cases are confirmed by lab testing each year, but the true number is estimated at 750,000 due to widespread underdiagnosis. Europe reports more than 14,000 cases annually, with the United Kingdom, Germany, and Ireland seeing the most. The two species responsible for most human illness are C. hominis, which spreads primarily between people, and C. parvum, which spreads from animals (especially cattle) to people and also between people.