Swollen Cans of Button Mushrooms: Why 100°C for 40 Minutes Was Never a Process
A fruit-and-vegetable processing unit in a coastal district retorts button mushrooms in brine. The product has pH 6.2, water activity 0.98 and 2% salt. A single lot of 12,000 cans was processed by immersion in boiling water at 100°C for 40 minutes, cooled in unchlorinated well water, and stored at ambient temperature. After 19 days, three cans are swollen and one has a leaking seam. The laboratory isolates an anaerobic, Gram-positive rod with terminal spores from a swollen can, and mouse bioassay on the brine is positive for neurotoxin. The unit's HACCP plan lists 'retorting' as a CCP with the critical limit '100°C for 40 min'. There is no heat-penetration study, no thermocouple record for the retort, and the dial gauge was last calibrated 14 months ago. The lot has already been dispatched to three districts.
1. Identify the hazard and demonstrate numerically why the stated critical limit cannot control it.
Read the worked answer
Hazard: Clostridium botulinum type A/B (proteolytic). The product is low-acid (pH 6.2, well above the 4.6 boundary), high-moisture (aw 0.98) and anaerobic inside a sealed can, with no competing flora after heating. These are precisely the conditions in which spores germinate and produce a lethal neurotoxin during ambient storage. Terminal spores plus anaerobiosis plus a positive mouse bioassay make the identification conclusive.
Why the process fails. The reference lethality for low-acid canned foods is a 12-log reduction of C. botulinum spores, i.e. 12 × D₁₂₁ (≈0.2 min) ≈ 2.4 min, and industry practice targets F₀ ≥ 3 min.
Convert the given process to an equivalent F₀ at 121.1°C using z = 10°C:
F₀ = 40 min × 10^((100 − 121.1)/10) = 40 × 10^(−2.11) ≈ 40 × 0.0078 ≈ 0.31 min.
That is roughly one-eighth to one-tenth of the minimum botulinum cook. Boiling water cannot deliver a 12-D process because the D-value of these spores at 100°C is of the order of tens of minutes. The CCP was therefore not merely breached - it was scientifically invalid. The leaking seam and unchlorinated cooling water add a second failure mode: post-process recontamination through the seam as the can cools.
2. What immediate corrective action and product disposition do you require for the 12,000 cans?
Read the worked answer
Hold and recall. The lot is unsafe food: it contains a pathogen capable of causing a life-threatening illness. All 12,000 cans must be placed on hold, including any stock in the three districts and at distributors, and a recall initiated at the highest urgency class because botulism is a severe, acute hazard. The Commissioner of Food Safety must be notified, retailers given a written stop-sale and a public notice, and recovered stock quarantined under seal.
No reconditioning. Because the defect is process failure plus container integrity failure, the lot cannot be reworked or re-labelled. Destruction at an authorised facility with a destruction certificate and weighment record is the only disposition; a small representative set should be retained for the prosecution file.
Investigate the adjacent lots. The same retort and the same closure settings were used before and after this lot; all lots processed since the last valid calibration and the last seam teardown must be treated as suspect until proved otherwise.
Report to the laboratory and to the licence holder in writing that the finding is a laboratory-confirmed pathogen, so that the FBO cannot argue ignorance. The offence sits in the unsafe-food provisions of the Act, with the Section 59 graded penalties, and the recall record becomes the documentary spine of the case.
3. Design the replacement control: what must the unit establish before it may retort again?
Read the worked answer
1. A scheduled process from a heat-penetration study. Measure the cold spot with calibrated data loggers across the full retort load, for the largest/slowest-heating can, at the worst-case fill weight and brine strength. Derive the required time at 121.1°C to deliver F₀ ≥ 3.0 min (≥12 D). Only that combination becomes the critical limit - not 100°C/40 min.
2. Retort instrumentation. Mercury-in-glass or calibrated thermocouple at the cold spot, a continuous recording device, a pressure gauge, and calibration at defined intervals; a trained retort operator who signs each chart.
3. Monitoring and records. Every batch: retort temperature-time chart, initial temperature, can size and load pattern, signed by the operator and verified by a supervisor before release.
4. Container integrity. Seam teardown at defined frequency with dimensional records; cooling water chlorinated to a measurable free residual so that the seam is not exposed to E. coli-bearing well water.
5. Verification. Incubation testing (30°C for 10–14 days) of cans from each retort load, periodic inoculated-pack or process-authority review, and annual revalidation after any change in can size, recipe or equipment. Only after 1–4 are documented may the line restart, and the HACCP plan must be re-issued with the validated CCP.