Cryptosporidium is a microscopic protozoan parasite with a property that makes it uniquely dangerous in treated municipal water: chlorine does not kill it. At the disinfectant concentrations used in routine drinking water treatment, Cryptosporidium oocysts survive intact. Unlike bacterial pathogens that are neutralized during disinfection, Cryptosporidium passes through a chlorinated system and reaches the tap unless it is physically removed by filtration or inactivated by ultraviolet light. That distinction — surviving the treatment step that utilities rely on most — explains why Cryptosporidium accounts for a disproportionate share of US waterborne disease outbreaks associated with treated municipal water.
The consequences of that vulnerability were made catastrophically clear in Milwaukee in 1993, when a single treatment plant failure led to the largest waterborne disease outbreak in recorded US history. More than 400,000 people became ill. The regulatory framework for surface water treatment — the rules that govern how utilities remove Cryptosporidium today — was fundamentally reshaped in the aftermath.
What Is Cryptosporidium?
Cryptosporidium is a genus of apicomplexan protozoan parasites. The two species responsible for the vast majority of human disease are Cryptosporidium parvum (associated with both human and bovine transmission) and Cryptosporidium hominis (primarily human-to-human). Both produce the illness known as cryptosporidiosis, a gastrointestinal infection that ranges from a week of miserable diarrhea in healthy adults to a chronic, life-threatening condition in immunocompromised individuals.
The organism’s public-health significance is defined almost entirely by its oocyst stage — the form that exists in the environment and survives in water. Oocysts are roughly 4–6 micrometers in diameter (smaller than a red blood cell) and enclosed in a thick, multilayered wall that confers extreme environmental resistance. They can survive for months in cold water, remain infectious after freezing, and are largely unaffected by chlorine at the contact times and concentrations practical in a municipal water system. The infectious dose is low: ingestion of as few as ten oocysts can cause infection in healthy adults; immunocompromised individuals may be susceptible to even fewer.
Transmission is fecal-oral. Oocysts shed in the feces of infected humans or animals enter source water through agricultural runoff, sewage overflow, or recreational contamination. A single calf or infected child can shed millions of oocysts per day. Because the oocyst is immediately infectious when shed — unlike some pathogens that require an intermediate host or developmental stage — contamination of a water source directly translates to infection risk in downstream consumers.
Cryptosporidium is on the EPA’s draft Sixth Contaminant Candidate List (CCL 6) as part of the microbial group under ongoing review, alongside Legionella and several other protozoa.
How Cryptosporidium Gets Into Drinking Water
The primary route into surface water is agricultural runoff. C. parvum is endemic in young calves, with infection rates exceeding 50% at some operations. A rain event following grazing near a river or reservoir can wash large oocyst loads into the watershed. Combined sewer overflows — stormwater surges that discharge untreated sewage directly to waterways — deliver concentrated pulses (see the DC Water Potomac sewage-spill lawsuit for a current example of how a single overflow event triggers downstream advisories). Wastewater plant effluent may contain residual oocysts even after secondary treatment. Wildlife (deer, beavers, birds) add background watershed loading year-round. The result is that surface water intakes serving drinking water systems face diffuse, persistent oocyst loading tied to precipitation and agricultural seasons.
Conventional surface water treatment — coagulation, flocculation, sedimentation, and filtration — physically removes oocysts. A well-operated plant achieves 3-log (99.9%) or greater removal. The critical point: chlorine disinfection, applied after filtration, does not inactivate Cryptosporidium at any practical water treatment dose. That step controls bacteria and viruses; oocysts pass through it intact. Filtration is the load-bearing barrier. Any event that causes turbidity breakthrough — a coagulation failure, a filter integrity breach, an unoptimized treatment chemistry change — sends oocysts into finished water with no disinfection backstop.
UV disinfection does inactivate Cryptosporidium. At approximately 3 mJ/cm², UV light damages oocyst DNA sufficiently to achieve 1-log inactivation; higher doses achieve greater credit. UV retrofits at large surface water systems are now a common engineering response, but UV is not universally deployed.
Health Effects
Symptoms in Healthy Adults
Cryptosporidiosis typically begins 2–10 days after ingestion of oocysts. The hallmark symptom is profuse, watery diarrhea — often described as explosive — accompanied by abdominal cramps and nausea. Vomiting, low-grade fever, and loss of appetite are common. In healthy adults with intact immune systems, the illness is self-limiting: it usually resolves within 7–14 days without antiparasitic treatment, though symptoms can relapse after apparent improvement. The primary medical concern in otherwise healthy patients is dehydration from fluid loss.
Nitazoxanide is the only antiparasitic drug approved by the FDA for cryptosporidiosis treatment, and it is effective primarily in healthy adults and children. It reduces the duration of illness and oocyst shedding. It is not an effective treatment for immunocompromised patients.
Immunocompromised Individuals
The disease trajectory in immunocompromised patients is categorically different. In people with AIDS (especially pre-HAART patients with CD4 counts below 100), solid organ transplant recipients, and those on chemotherapy, Cryptosporidium is not self-limiting. It establishes chronic, progressive infection of the gastrointestinal tract and, in some cases, the biliary system. Chronic cryptosporidiosis causes severe malnutrition, wasting, cholangiopathy, and death without immune reconstitution.
Before HAART became available in the mid-1990s, Cryptosporidium was a leading cause of death in AIDS patients, with no effective treatment. No reliable antiparasitic exists for immunocompromised patients today — management focuses on immune reconstitution, fluid and nutritional support, and reducing immunosuppressive drug doses where feasible. The 69 deaths in Milwaukee in 1993 were concentrated in AIDS patients and the elderly for exactly this reason.
High-risk populations include people with HIV/AIDS, transplant recipients on maintenance immunosuppression, chemotherapy patients, infants and young children, and people with primary immunodeficiency disorders.
The Milwaukee 1993 Outbreak
No episode in US public health history illustrates the consequences of Cryptosporidium filtration failure more starkly than what happened in Milwaukee, Wisconsin, in the spring of 1993. The outbreak sickened an estimated 403,000 people — roughly a quarter of Milwaukee County’s population — and killed at least 69, making it the largest confirmed waterborne disease outbreak in United States history. Understanding what went wrong, and why it went undetected for as long as it did, shaped two decades of EPA regulation.
The Setting
Milwaukee draws its drinking water from Lake Michigan, a pristine-appearing but heavily trafficked source receiving agricultural and urban runoff from its watershed. In early 1993, the city was served by two treatment plants. The Howard Avenue Water Treatment Plant on the south side served approximately 1.6 million customers. It used conventional treatment: coagulation, flocculation, sedimentation, and filtration, followed by chlorine disinfection.
In late 1992 and early 1993, the plant changed its coagulant from alum (aluminum sulfate) to polyaluminum chloride (PAC). Coagulant chemistry changes can alter the character of floc — the clumped particles that form during treatment and carry pathogens to the filters. PAC behaves differently from alum under varying source water conditions, and optimizing coagulant dose after a switch requires careful monitoring and operational adjustment.
The Failure
March 1993 brought conditions that stressed the plant’s treatment chemistry. Lake Michigan turbidity — driven by spring snowmelt, runoff, and near-shore algal material — was elevated. Simultaneously, the plant was operating with the new coagulant under conditions that were not well-tuned. Floc formation was compromised, and the resulting turbidity breakthrough — oocysts that would normally have been captured in the filter beds — passed into finished water.
Critically, the turbidity monitoring at the time was conducted on combined filter effluent rather than individual filter banks. A single troubled filter bank could have been masked by the performance of the others in aggregate readings. Plant operators observed turbidity readings that appeared marginally elevated but still within the range the plant had historically operated within — not an obvious alarm condition.
Cryptosporidium oocysts flowed into distribution from approximately mid-March through April 9, 1993, when the Howard Avenue plant was taken offline and its service area shifted to the other Milwaukee plant. The contamination period lasted roughly three weeks before the connection was made.
The Discovery and Response
The first public signal was not a treatment plant alarm — it was pharmacies running out of anti-diarrheal medication and hospitals seeing surges in emergency department visits for gastrointestinal illness. Grocery stores selling Imodium and Pepto-Bismol to unusual volumes of customers was, retrospectively, one of the earliest indicators that something was systemically wrong with the water supply.
On April 5, 1993, Milwaukee health officials issued a boil-water advisory for the entire city — an unprecedented action for a major US urban water system at the time. The advisory affected hospitals, nursing homes, restaurants, and households across the metropolitan area. The Howard Avenue plant was shut down on April 9.
Epidemiologists from the CDC and the Wisconsin Division of Health converged on Milwaukee to investigate. Case-control studies and spatial analysis confirmed that illness was clustered in the Howard Avenue service area and that the attack rate was heavily concentrated in the weeks when the plant had been experiencing turbidity issues. A CDC retrospective study estimated the total illness burden at 403,000 people — a figure derived from a random-digit-dial household survey across Milwaukee County, since only a small fraction of cases had sought medical care or been laboratory confirmed.
Deaths were concentrated in two vulnerable populations: people with AIDS and elderly nursing home residents. At a time when HIV was still a disease managed without antiretroviral therapy, an AIDS diagnosis with a CD4 count below 100 was effectively a death sentence if cryptosporidiosis became chronic. The 69 deaths attributed to the outbreak represented primarily this population, though subsequent analyses have suggested the true death toll attributable to the outbreak may have been higher, as the AIDS population experienced elevated mortality over the months following the outbreak.
The economic toll was substantial. A CDC retrospective study estimated $96 million in medical costs and lost productivity — a figure that became a frequently cited benchmark in the cost-benefit analyses underlying subsequent EPA rulemaking.
Lasting Impact
The Milwaukee outbreak produced several immediate and lasting changes:
Operationally, Milwaukee rebuilt its treatment approach — upgrading filter monitoring to individual filter effluent turbidity (rather than combined), tightening coagulant optimization protocols, and eventually installing UV disinfection as a redundant barrier against Cryptosporidium. Individual filter monitoring became a regulatory requirement nationwide.
Scientifically, the outbreak established epidemiological methods for estimating waterborne disease burden from population surveys that are now used as models for outbreak investigation. It also demonstrated that Cryptosporidium oocysts were a practical threat to large municipal systems, not just a theoretical concern.
Regulatory, the Milwaukee outbreak is the direct driver of the EPA’s subsequent surface water treatment rulemaking. The treatment standards that govern how utilities handle Cryptosporidium today trace directly to the lessons of Howard Avenue.
| Timeline Event | Date |
|---|---|
| Howard Avenue plant switches coagulant to PAC | Late 1992 |
| Elevated Lake Michigan turbidity; turbidity breakthrough begins | Mid-March 1993 |
| Pharmacies and ERs report unusual GI illness surge | Late March 1993 |
| Milwaukee issues citywide boil-water advisory | April 5, 1993 |
| Howard Avenue plant taken offline | April 9, 1993 |
| CDC retrospective study estimates 403,000 illnesses, 69 deaths | 1994 |
| EPA begins developing IESWTR in response | 1994–1998 |
EPA Regulation: How Milwaukee Reshaped the Rules
Before 1993, the Surface Water Treatment Rule (1989) required utilities to achieve 3-log removal or inactivation of Giardia cysts through combined treatment. Cryptosporidium was not specifically addressed. Milwaukee changed that calculus permanently.
The Interim Enhanced Surface Water Treatment Rule (IESWTR), finalized in 1998, was the first regulatory response targeted specifically at Cryptosporidium. It required:
- Filtered systems serving more than 10,000 people to achieve at least 2-log removal of Cryptosporidium (supplementing the existing Giardia requirement)
- Individual filter turbidity monitoring — each filter bank monitored separately, ending the combined-effluent monitoring that obscured Milwaukee’s failure
- Turbidity performance standards tightened: no more than 1 NTU in individual filter effluent; at least 95% of measurements below 0.3 NTU in combined effluent
The Long-Term 1 Enhanced Surface Water Treatment Rule (LT1ESWTR), finalized in 2002, extended similar requirements to smaller systems.
The Long-Term 2 Enhanced Surface Water Treatment Rule (LT2ESWTR), finalized in 2006, went substantially further. It required filtered systems serving more than 10,000 people to monitor source water for Cryptosporidium and assigned each utility to a treatment “bin” based on those results:
| LT2ESWTR Bin | Source Water Oocysts/L | Additional Treatment Required |
|---|---|---|
| Bin 1 | <0.075 | No additional treatment |
| Bin 2 | 0.075 to <1.0 | 1-log additional Cryptosporidium treatment |
| Bin 3 | 1.0 to <3.0 | 2-log additional Cryptosporidium treatment |
| Bin 4 | ≥3.0 | 2.5-log additional Cryptosporidium treatment |
The rule allowed utilities to use UV, ozone, membranes, or other approved technologies to earn additional log credits — creating a direct regulatory linkage between source-water monitoring and treatment requirements that did not exist when Milwaukee’s Howard Avenue plant changed coagulant without any Cryptosporidium monitoring in place.
These rules also intersect with the disinfection byproducts framework: utilities achieving Cryptosporidium inactivation credit through ozone or chlorine dioxide must simultaneously manage the byproducts those oxidants produce.
| Rule | Year Finalized | Key Cryptosporidium Requirement |
|---|---|---|
| Surface Water Treatment Rule | 1989 | 3-log Giardia removal; Cryptosporidium not explicitly addressed |
| IESWTR | 1998 | 2-log Cryptosporidium removal; individual filter monitoring |
| LT1ESWTR | 2002 | Extended IESWTR requirements to systems <10,000 |
| LT2ESWTR | 2006 | Source water monitoring; bin-classified treatment requirements; UV credit |
There is no Maximum Contaminant Level for Cryptosporidium. Regulatory requirements are expressed as Treatment Technique obligations — mandated processes and removal credits rather than a concentration limit in finished water. This approach reflects the difficulty of monitoring for oocysts in finished water routinely, and the principle that effective physical removal upstream is the appropriate control point.
How Widespread Is Cryptosporidium?
LT2ESWTR source water monitoring data found oocysts detectable in the majority of large surface water systems sampled across the United States, with concentrations varying by watershed, season, and precipitation. In treated drinking water, the combination of strengthened filtration requirements and increasing UV adoption has substantially reduced outbreak risk — but has not eliminated it. Outbreaks continue at systems with filtration failures, at non-community systems (campgrounds, small resorts, seasonal facilities) with less robust treatment, and at groundwater-under-the-direct-influence-of-surface-water (GWUDI) systems.
In recreational water, Cryptosporidium is now the leading cause of pool- and water-park-associated outbreaks in the United States, surpassing treated drinking water. Chlorinated pools provide no inactivation. Fecal incidents from infected swimmers introduce oocysts into a disinfection environment that cannot kill them. The CDC’s Healthy Swimming data consistently show Cryptosporidium responsible for the majority of recreational water illness outbreaks each year.
Private well users in agricultural areas face elevated risk — wells near cattle operations or with shallow water tables susceptible to surface infiltration can carry oocyst loads. Private wells are not subject to federal treatment requirements. Cryptosporidiosis is also a leading cause of traveler’s diarrhea in regions without equivalent treatment infrastructure.
How WaterVerge Tracks Cryptosporidium
Utilities are not required to test finished water for oocysts, so Cryptosporidium does not appear in routine compliance monitoring. WaterVerge tracks it through two proxies.
Treatment technique compliance: SDWIS records include violations of turbidity treatment technique requirements under IESWTR and LT2ESWTR — exceedances of individual filter turbidity limits, combined effluent failures, and monitoring violations. A utility with repeated turbidity compliance issues is showing signals relevant to Cryptosporidium risk even without oocyst-specific data. These violations appear on WaterVerge city pages under compliance history.
LT2 bin classification: Where available, WaterVerge incorporates LT2ESWTR source water monitoring results and bin assignments. A utility in Bin 3 or Bin 4 faces more stringent treatment requirements — that context matters for consumers evaluating how aggressively their utility is required to address Cryptosporidium.
How to Remove Cryptosporidium
Municipal-Scale Treatment
Optimized coagulation, flocculation, sedimentation, and filtration remains the primary control. A properly operated conventional plant achieves 3-log or greater oocyst removal through physical processes alone. UV disinfection at 3–12 mJ/cm² achieves 1–2 log additional inactivation credit. Membrane filtration (microfiltration and ultrafiltration) provides absolute physical barriers at higher removal credits. Chlorination is not an effective Cryptosporidium control at any practical dose — the regulatory response has been to mandate physical removal and UV as dedicated barriers rather than relying on disinfectant chemistry.
Point-of-Use Treatment
For individual households — particularly those with immunocompromised members, those on boil-water advisories, or those using private wells in agricultural areas — several treatment options are effective at the tap:
| Method | Effectiveness | Certification | Notes |
|---|---|---|---|
| Reverse osmosis | >3-log (99.9%+) removal | NSF/ANSI 58 | Under-sink units; high effectiveness |
| 1-micron absolute filter | >3-log removal | NSF/ANSI 53 (cyst reduction) | Verify “absolute” not “nominal” pore size |
| UV at point-of-use | Inactivation at ~3+ mJ/cm² | NSF/ANSI 55 Class A | Requires pre-filtration for turbid water |
| Boiling (1 minute) | Complete kill | N/A | Effective but impractical for all uses |
| Standard activated carbon pitcher | Not effective | N/A | Does not remove oocysts |
Boiling water for one minute destroys Cryptosporidium oocysts completely and is the recommended emergency measure during boil-water advisories. At elevations above 6,500 feet, boil for three minutes.
Reverse osmosis systems certified to NSF/ANSI 58 physically exclude oocysts through membrane pores far smaller than the 4–6 micron oocyst. See our guide to best reverse osmosis systems for certified options.
Filters certified to NSF/ANSI 53 for cyst reduction use 1-micron absolute pore-size membranes that physically exclude oocysts. The key qualifier is “absolute” — a nominal 1-micron filter may allow particles larger than 1 micron to pass through; an absolute rating means no particle at or above that size passes. Confirm NSF/ANSI 53 cyst certification on the product’s certification listing, not just marketing language.
Standard activated carbon pitcher filters — including most common consumer pitcher brands without an explicit cyst certification — are not effective for Cryptosporidium removal. Carbon filtration targets organic compounds and chlorine; it does not mechanically exclude oocysts. See our guide to best water filter pitchers for models that include NSF/ANSI 53 cyst certification and those that do not.
For a broader overview of home testing options, see our guide to how to test your tap water — useful context for households on private wells or those receiving boil-water advisories.
Check Your City
Cryptosporidium risk from drinking water in the United States has been substantially reduced by the filtration requirements that emerged from Milwaukee — but risk is not zero, particularly for systems with treatment compliance history, systems using high-oocyst-load surface water sources, and non-community systems with less rigorous treatment oversight.
Search your city on WaterVerge to review your utility’s turbidity compliance history, treatment technique violations, and source water characteristics. If your household includes an immunocompromised individual — someone with HIV, a transplant recipient, a chemotherapy patient — the risk calculus for point-of-use protection is different than it is for the general population, and a 1-micron absolute filter or under-sink reverse osmosis system is a reasonable precaution regardless of your utility’s recent compliance record.
Check your city's water
See if this contaminant has been detected in your local water supply.
Search your city →