ORLANDO, FL. Back in February 2026, state inspectors walked into the Crumbl bakery in Orlando and found it open for business, selling cookies to customers, without a current food permit on file.
The Florida Department of Agriculture and Consumer Services inspection, conducted on February 25, 2026, documented four violations at the retail bakery, including one priority violation directly tied to food safety. The inspector's report noted plainly: "The establishment is open and operating without a current food permit."
What Inspectors Found
Beyond the permit problem, the inspection turned up a more immediate food safety concern in the kitchen. The bakery had been using lactic acid as its sanitizing agent on food-contact surfaces, but when the inspector tested the solution, it registered 0 ppm, meaning the surfaces were not being effectively sanitized at all.
The inspector corrected that one on the spot. Chlorine sanitizer was set up, tested, and food-contact surfaces were sanitized before the inspector left.
Two additional violations, both classified as priority foundation, addressed the bakery's written policies. The establishment had no verifiable system to inform employees of their responsibility to report health conditions that could spread foodborne illness. It also had no written procedure for cleaning up vomit or similar contamination events.
Industry guidance was provided for both.
What These Violations Mean
Operating without a valid food permit is not a paperwork technicality. A permit is the state's mechanism for confirming that a food establishment has been reviewed and approved to operate safely. When a facility is open without one, it means the state has no current assurance that the location meets baseline sanitation and structural standards. Customers buying cookies at the Orlando Crumbl in late February had no way of knowing that.
The sanitizer failure is a direct food safety issue. Food-contact surfaces in a bakery, the bowls, mixers, countertops and utensils that touch the product customers eat, are supposed to be sanitized between uses to kill pathogens. A sanitizer solution registering 0 ppm provides no antimicrobial protection at all. The lactic acid solution the bakery had been relying on was, in effect, doing nothing.
The two policy violations carry less immediate risk but point to a preparedness gap. Employees who do not know they are required to report illness symptoms, including nausea, vomiting, or diarrhea, are more likely to work through those symptoms. In a retail food environment where staff handle product directly, a sick employee is a direct transmission route to customers. The absence of a written illness reporting system is the kind of structural failure that allows that scenario to unfold without any check.
The missing vomit cleanup procedure matters for the same reason. Without a written protocol, staff responding to a contamination event in the bakery have no standardized guide for containing and sanitizing the area, which increases the risk that pathogens spread to food or food-contact surfaces.
The Longer Record
The inspection data lists this as a "Met Sanitation Inspection," meaning the bakery was found to meet sanitation standards by the end of the inspection process, at least on the violations that could be addressed immediately. None of the four violations were marked as repeats, suggesting inspectors had not previously cited this location for the same problems.
The data does not provide a prior inspection count for this location, so it is not possible to place February's findings against a longer pattern of citations at this specific store. What the record does show is a facility that was open and actively serving customers on the day inspectors arrived, despite lacking a current permit, and that its sanitization process was failing in the kitchen.
The priority sanitizer violation was corrected during the inspection itself. The permit violation, the illness reporting gap, and the missing cleanup procedure were not corrected on site. Industry guidance was provided for the policy issues, but guidance is not the same as a written procedure in place and verified.
The Unresolved Question
The inspection record closes with the bakery having met sanitation standards on the day of the visit, after chlorine sanitizer was introduced. But the operating-without-a-permit citation remained unresolved when inspectors walked out the door.
State law under Florida Statute 500.12 requires a valid permit for any food establishment to operate. The inspector's note was direct: the establishment was open and operating without one.
Whether the permit lapse was an administrative oversight or a longer gap in compliance, the record does not say. What it does show is that on February 25, 2026, customers were walking into an Orlando cookie shop that had not cleared the state's basic threshold for legal operation.