---
title: "Scientific analysis of a Legionella outbreak"
source_url: https://legionella.io/articles/scientific-analysis-of-a-legionella-outbreak/
canonical_url: https://legionella.io/articles/scientific-analysis-of-a-legionella-outbreak/
pillar: "Legionella Basics & Science"
summary: "How a Legionella outbreak gets traced to its source by matching patient and water samples - and the records that decide if your building is cleared or blamed."
primary_keyword: "Legionella outbreak analysis"
date_published: 2025-10-21
date_reviewed: 2026-06-26
author: "Legionella.io editorial team (REMOTE TECH LTD)"
reviewed_against: "HSE L8 and HSG274 guidance"
region: "United Kingdom"
license: "(c) REMOTE TECH LTD. Quote freely with attribution and a link to source_url."
---

# Scientific analysis of a Legionella outbreak

When public health teams investigate a Legionnaires' disease outbreak, they are really running a matching exercise. Do the bacteria that made people ill match the bacteria living in a specific water system? Everything else - the maps, the questionnaires, the lab work - exists to answer that one question. And once you see it that way, outbreak science stops being abstract microbiology and becomes a list of the evidence that will decide whether your building is cleared or named as the source.

That is the useful way for a duty holder to read this subject. Not as something that happens to other people in case reports, but as a preview of exactly what investigators will look for - and therefore what is worth having in order long before anyone knocks on your door.

## How investigators actually pin down a source

A source attribution rests on three strands of evidence that have to line up.

The first is epidemiology. UKHSA links individual cases into clusters and outbreaks by looking at where people were, and when, in the days before they fell ill [1]. With Legionella the incubation period is short - commonly cited as somewhere around two to ten days, though your investigators work to their own case definition [2]. Plot a handful of cases against a map and a calendar and a shape appears: a few streets, a transport hub, a particular building, a window of a couple of weeks. That shape narrows the search to a manageable set of candidate water systems.

The second strand is environmental sampling. Once the suspect systems are identified - a cooling tower, a domestic hot and cold system, a spa pool - investigators sample them for Legionella. Sampling supports an investigation, but it is evidence about specific outlets at one moment, not a verdict on the whole system, and HSE guidance is explicit that sampling frequency and approach follow the system and risk assessment rather than a fixed rule [3].

The third strand, and the one that actually closes the loop, is laboratory comparison. A water system can carry Legionella without being the source of any particular cluster, so a positive environmental sample on its own proves little. What matters is whether the strain in the water matches the strain isolated from patients. Labs culture and type the organism, and increasingly compare clinical and environmental isolates using whole-genome sequencing; a close genetic match is strong evidence of a link, while a clear mismatch helps rule a system out [4]. This is also why exposure has to be plausible in the first place: Legionnaires' disease is caught by inhaling contaminated aerosol, not by drinking water, so a credible source must be capable of producing respirable droplets that could have reached the cases [5].

Here is the part that decides how your site is treated. A well-run system with clean samples and a documented control regime can often be excluded quickly. A system with positive samples and no records to show how long the failure has been running becomes the prime suspect - sometimes before sequencing has confirmed anything at all.

## An illustrative cluster, and what the analysis turned on

The following scenario is a composite, built to show how the evidence stacks up. It is not a real, named incident.

Picture half a dozen community-acquired cases reported across a few weeks, all within roughly the same square mile of a town centre. None of the patients knew each other. UKHSA maps their movements and the overlap points to a small commercial district. Two candidate sources stand out: a cooling tower on the roof of an office block, and a leisure suite with a spa pool a few hundred metres away.

Environmental sampling is carried out at both. The spa pool comes back negative. The cooling tower returns Legionella pneumophila, and sequencing puts that isolate alongside the patient isolates as a match. On the face of it, the tower is the source. But the decisive detail was not the positive result. It was that the building operator could not produce a coherent record of the tower being dosed, monitored and inspected. The positive therefore read as a long-standing control failure rather than a transient blip - and that shaped the enforcement that followed. A nearby site that also happened to carry low levels of the organism, but could show a consistent, dated control regime, was handled very differently and dropped out of the investigation early.

The transferable lesson is blunt. The sample tells investigators *where* the bacteria are. Your records tell them *how long* and *how badly* - and that second question is the one that determines consequences.

## From the lab bench to your plant room

You will never run the sequencing yourself, and you do not need to. What you can do is make sure that, if your site is ever in the candidate set, the evidence points to a controlled system.

A few moves do most of the work:

- **Know your aerosol sources and keep them named.** Cooling towers, evaporative condensers, spa pools, showers and spray taps are the fittings that turn water into something breathable. Cooling towers and evaporative condensers also carry a specific notification duty, which is itself part of how the authorities know where to look during an outbreak [6].
- **Make your records tell a story over time, not just today.** A run of dated temperatures, dosing logs, inspections and cleaning entries is what lets an investigator exclude you. Write down the decision behind a task, not only that it was done - it is the difference between "ruled out in a day" and "prime suspect for a month".
- **Treat a single clean sample for what it is.** A negative result describes the outlets sampled at that moment. It is useful evidence, never a clean bill of health, and it will not carry you through an investigation on its own.
- **Understand why the bacteria persist.** Source systems harbour Legionella in biofilm and sediment, which is why a positive can reflect months of drift rather than a single bad week - see [Legionella in biofilms](https://legionella.io/articles/legionella-in-biofilms-why-eradication-is-difficult/).

If you want to understand the other side of the table - who leads an investigation and how to work with them - [Collaborating with public health authorities on Legionella](https://legionella.io/articles/collaborating-with-public-health-authorities-on-legionella/) covers that relationship in detail.

## What to understand before an investigation ever starts

Outbreak investigation is led by UKHSA and local environmental health teams, not by the duty holder, and attributing a source is an epidemiological and laboratory job that takes specialist judgement. Nothing here is a method for running that investigation, reading a sequencing result, or deciding whether your system is implicated - that is not a call you make about your own site. The point of understanding the science is narrower and entirely practical: it shows you which evidence decides the outcome, so you keep that evidence in order now. The specifics - what to sample, what counts as a result of concern, what remediation is required - belong to a competent, site-specific risk assessment.

## FAQ

### Can whole-genome sequencing actually prove our building was the source?
Not on its own, and not in isolation from the rest of the evidence. A close genetic match between the strain in your water and the strain from patients is strong support for a link, and a clear mismatch helps exclude your system, but the conclusion still rests on the epidemiology - whether exposed people were plausibly in the path of your aerosol during the relevant window [4][1]. Sequencing sharpens the picture; it does not replace it.

### If none of the patients were ever inside our building, can we still be implicated?
Yes. Legionella reaches people through airborne droplets, and an aerosol source such as a cooling tower can affect people who simply passed nearby rather than entering the building [5]. Proximity to where cases were, not just who came through your door, is enough to put a system in the candidate set.

### We had a clean Legionella sample last month - does that protect us in an investigation?
It helps, but it does not settle anything. A negative sample reflects the outlets tested on the day they were tested, and conditions can drift between samples [3]. What stands up in an investigation is a continuous record of control - temperatures, monitoring, cleaning and the actions taken when something looked off - rather than a single favourable snapshot.

## Related reading

- [Collaborating with public health authorities on Legionella](https://legionella.io/articles/collaborating-with-public-health-authorities-on-legionella/)
- [Case study: a Legionella compliance prosecution in the UK](https://legionella.io/articles/case-study-a-legionella-compliance-prosecution-in-the-uk/)
- [Legionella in biofilms: why eradication is difficult](https://legionella.io/articles/legionella-in-biofilms-why-eradication-is-difficult/)
- [Advances in Legionella research and studies](https://legionella.io/articles/advances-in-legionella-research-and-studies/)

## Sources

[1] UKHSA, "Investigation of Legionnaires' disease: cases, clusters and outbreaks". https://www.gov.uk/government/publications/investigation-of-legionnaires-disease-cases-clusters-and-outbreaks
[2] CDC, "About Legionnaires' Disease". https://www.cdc.gov/legionella/about/index.html
[3] HSE, "Testing and monitoring your water system for legionella". https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm
[4] CDC, "Laboratory Testing for Legionella". https://www.cdc.gov/legionella/php/laboratories/index.html
[5] CDC, "How Legionella Spreads". https://www.cdc.gov/legionella/causes/index.html
[6] HSE, "Other duties: RIDDOR and notification of cooling towers or evaporative condensers". https://www.hse.gov.uk/legionnaires/what-you-must-do/duties.htm