The rivals were buying from the same farm.

On Sunday, August 9, Taylor Farms recalled salsas and guacamole containing jalapeños from Walmart, Kroger, and Whole Foods. Also from Target, Trader Joe’s, and Hannaford. Six grocery chains that compete on price, on freshness, and on the trust of the same shoppers, pulling the same products in the same weekend for the same reason.

The reason sat two steps upstream. Coast Citrus Distributors, the importer that supplied the peppers, recalled them after a salmonella outbreak the CDC and FDA say has sickened 345 people across 27 states and put 36 in the hospital. Taylor Farms named a farm in Sinaloa, Mexico, as the potential source and stopped buying from it. The same traceback reached Chipotle and Qdoba, which had received the peppers and stopped using them.

And this was the second time in a matter of weeks that the same supplier’s name surfaced. In July, the FDA linked a large cyclospora outbreak to shredded iceberg lettuce from a Taylor processing facility in Guanajuato, Mexico. That lettuce had been served at Taco Bell locations where sick people ate, and it had gone into 27 states in under three weeks. Taylor Farms de Mexico recalled all of its central-Mexico iceberg on July 17.

Taylor Farms is one of North America’s largest producers of salads and fresh-cut vegetables. It supplies McDonald’s and Chipotle. It supplies the chains above. And much of what it produces is sold wholesale and unbranded, which means the shopper standing at the salad case has no way to know whose lettuce is in the bag.

So shoppers gave up on the category. Unit sales of fresh iceberg fell 15.3 percent in the four weeks ended July 25, after an 11.1 percent drop the month before. “Many consumers are avoiding lettuce of all kinds, unless they know the source, such as a local farm,” said Joe Feldman of Telsey Advisory Group. When you can’t see the upstream, the only safe move is to avoid everything downstream.

Here’s the structure the recall exposed. Dozens of operators, each treating the jalapeños in their salsa as their jalapeños, were drawing from one shared source. The competition among them was real. The pooling above them was invisible, and it stayed invisible right up until one farm’s contamination propagated through all of them in a single weekend.

Your operation carries a version of this map, and you probably haven’t drawn it. The two lumberyards you alternate between may buy from the same mill. Your freight broker and your backup broker may book the same three carriers. Your card processor and your competitor’s may clear through one bank. Your website, your scheduling tool, and your phone system may sit in the same cloud region, which you’ll discover the morning all three go down together.

The redundancy you think you bought may be two logos on one pipe.

The check costs a phone call per vendor: ask where the thing actually comes from. One level up is usually enough. When two of your suppliers name the same source, you have one supplier and a spare invoice. That’s worth knowing on a calm day, because on the loud day the notice that matters (the recall, the outage, the allocation letter) goes out to everyone who shares the pipe at once, and your fallback is standing in the same line you are.

There’s also the demand side, and it’s colder. When an invisible shared source fails, customers can’t tell whose product is safe, so they walk away from the whole shelf. The lettuce numbers say buyers punish the category first and sort out the innocent later. Being clean is worth less than being visibly, provably separate.

Grocery chains have entire departments to map this, and it still caught them in public. You have an afternoon, a vendor list, and the advantage that your list is short.

So the question this one leaves behind: how many of your “different” vendors, tools, or inputs actually trace back to one upstream source, and would you know before it failed?

← More observations