Yes, a plumbed-in coffee or vending machine is a small but real Legionella consideration - though not for the reason people assume. The water that brews your coffee is too hot to worry about. The watch-points are the cold feed line and any warm or ambient water standing in the machine’s internal tank, especially on a unit that sits idle for days.

These machines almost never appear on a water risk assessment, because nobody thinks of them as plumbing. A bean-to-cup machine is filed under “office perk” and a combi vending unit under “facilities”. Both take a mains connection, hold water inside, and dispense it for people to drink - which makes them part of the water system you are already responsible for [1].

What’s actually inside a plumbed-in machine

Stop picturing an appliance and picture the water path. Mains cold water enters through a narrow flexible hose, often a metre or two of tubing tucked behind the unit - sometimes a much longer run to a machine parked in a far corner of the break room. That run is a dead leg if the machine is rarely used.

Inside, the water splits. A bean-to-cup machine water tank or internal reservoir holds cold water, which feeds a boiler that heats it on demand. The boiler side runs hot. The reservoir and the cold feed do not. A combi vending machine adds a chilled circuit for cold drinks, holding water at a cool-but-not-cold temperature between cycles. The “warm” drink settings - hot chocolate, a child’s warm milk, frothed milk for a latte - deliberately blend hot and cold water down to something lukewarm.

At dispense there is a little steam and a little splash, but a hot drinks machine is a weak aerosol source next to a shower or a cooling tower, which are the systems most likely to create real airborne risk [2]. Legionella reaches the lungs by inhaled aerosol or by water aspirated while drinking [3]. For a hot drink you swallow, the inhaled-spray route is minor. The system behind the cup is the part worth managing.

Where the risk sits, and where it doesn’t

The hot side mostly polices itself. Water held above roughly 50°C at the outlet sits in the range that suppresses Legionella, and brewing water is hotter still [4]. You will not grow much in a boiler that is genuinely hot.

The risk lives in the lukewarm and ambient zones. Cold water that has crept above about 20°C, a chilled tank that sits warm after a power-saving overnight cycle, the blended “warm” outputs, and standing water in the feed hose all fall into or near the broad band - commonly cited as around 20-45°C - in which Legionella multiplies most readily [4]. Add scale and the thin organic film that builds inside any wet tank, and you have somewhere bacteria can settle.

Now layer on usage. A machine hammered all day in a busy office refreshes its water constantly and is low concern. A machine in a meeting room used twice a week, or one switched off over a long weekend or a Christmas closure, holds that warm-ish water static for days. That is the plumbed coffee machine risk in one sentence: not the drink, but the idle machine.

What the service contract doesn’t cover

Here is the part that catches facilities managers out. The engineer who visits to handle hot drinks machine descaling is managing scale and taste, on an interval the manufacturer sets for product quality - not microbiological safety. Descaling is not disinfection. A descale clears limescale from the boiler so the machine keeps working and the coffee tastes right; it is not a controlled chemical or thermal disinfection of the tank and tubing, and the visit frequency was never calculated against your risk assessment [5][6].

Two things follow. First, you cannot treat a service contract as your Legionella control - it manages a different problem and answers to a different schedule. Second, and less obvious, the highest-risk moment for any of these machines is the first dispense after it has stood idle, and no quarterly service visit will ever happen to land on your Monday morning. That flush is yours to own.

So treat the machine like any little-used outlet on the system: run it through before it goes back into normal service after a quiet spell - the same logic behind Flushing little-used outlets: best practices, and the same standing-water thinking that applies to an idle Are water coolers and bottle-filling stations a Legionella risk? unit or to Ice machines and Legionella: the catering and healthcare risk nobody flushes. Pair that flush with the manufacturer’s descale and a clean of the removable parts, and you have covered both the scale problem and the standing-water one.

A proportionate routine

Keep this light. It is a small risk, managed with small, consistent habits, not a major programme.

  • Put each plumbed-in machine on the asset register and into the water risk assessment as a drinking-water outlet, with a named owner [1].
  • After any closure, weekend or week of non-use, run several dispenses to waste - hot, cold and any chilled or warm settings - before serving from it again.
  • Keep to the manufacturer’s descaling and servicing schedule, record each visit, and clean the removable parts, drip trays and nozzles where biofilm and milk residue gather.
  • Keep the mains feed hose as short as practical, and flag a long run to a remote machine as a possible dead leg to assess.
  • For units on a power-save cycle, sense-check that the cold and chilled water is not drifting up into the warm band overnight.

A caveat worth reading

A single bean-to-cup unit in a quiet office and a bank of combi vending machines in a hospital atrium are not the same risk, and the right flushing interval, descale frequency and whether any sampling is warranted are calls for your own site-specific risk assessment and a competent person - not a figure copied off a web page. The temperatures and growth band above are the general expectations the standards work to; your assessment sets the numbers for your machines and your building. This is practical guidance for break room water hygiene, not legal, medical or engineering advice for a particular installation.

Do this next

Walk the break rooms with a notebook and, at each machine, answer three questions: is it on the water risk assessment, who owns flushing it after a quiet spell, and when was it last descaled - and can you prove it? Any blank is your starting point. The descaling discipline is the same one set out in Showerhead cleaning and descaling schedules, and pulling these checks onto a dated digital log is what turns “the engineer sorts it” into something you can actually evidence to an inspector.

FAQ

Can you catch Legionnaires’ disease from a cup of coffee?

There is no good evidence of that, and the brewing water is hot enough to suppress Legionella in any case. The concern is not the drink in the cup - it is the cooler standing water in the tank and feed line of an idle machine, and even there a coffee machine produces little aerosol, so the practical risk is low [3]. Manage the system, not the cup.

Does our coffee or vending machine need to be on the Legionella risk assessment?

If it is plumbed into the mains and dispenses water people drink, it is a water outlet, and a duty holder is expected to identify, assess and control it [1]. That does not mean it is high-risk - most units are assessed as low - but leaving it off the assessment entirely means nobody owns the flushing or the records for it.

The machine is on a manufacturer service contract. Isn’t that enough?

Not on its own. A service visit handles scale, mechanical upkeep and drink quality on the manufacturer’s schedule, which is not a Legionella control and is not aligned to your risk assessment [5]. You still own flushing the machine after idle periods and recording the regime around it.

Sources

[1] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [2] HSE, “Systems most likely to create legionella risk”. https://www.hse.gov.uk/legionnaires/risk-systems.htm [3] CDC, “How Legionella Spreads”. https://www.cdc.gov/legionella/causes/index.html [4] HSE, “Hot and cold water systems”. https://www.hse.gov.uk/legionnaires/hot-and-cold.htm [5] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [6] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm