FDA Warning Letters in 2026 — The Compounding Pharmacy Patterns
Fifty-seven warning letters. That is what the FDA's Center for Drug Evaluation and Research (CDER) and Office of Regulatory Affairs (ORA) issued to compounding pharmacies in fiscal year 2026 — a 12% jump over 2025. If you supply bulk active pharmaceutical ingredients (APIs), excipients, or finished intermediates, these actions are not someone else's problem. The expectations they set travel upstream, and they land on you.
Pull the data from the FDA's Warning Letter database alongside CDER's Compounding Quality Center of Excellence reports and the same three failures keep surfacing: sterility assurance, stability data, and component testing. The rest of this piece works through each one and what it means for the documentation a buyer will now demand.
The Three Deficiency Categories in 2026
The 2026 letters cite violations under Section 503A (traditional compounding) and Section 503B (outsourcing facilities) of the Federal Food, Drug, and Cosmetic Act. Three categories dominate.
| Deficiency Category | % of 2026 Letters | Key CFR/USP References | |---------------------|-------------------|------------------------| | Sterility assurance failures (environmental monitoring) | 68% | 21 CFR 211.113(b), USP <797>, USP <71> | | Deficient stability data (beyond-use dates) | 42% | 21 CFR 211.166, USP <795>, USP <797> | | Inadequate component testing (raw material verification) | 39% | 21 CFR 211.84, USP <1083> |
Percentages exceed 100% because letters cite multiple violations.
Sterility Assurance Failures (68%)
Thirty-nine of the 57 letters flagged sterility assurance under 21 CFR 211.113(b) and USP <797> (Pharmaceutical Compounding—Sterile Preparations). Environmental monitoring is where the agency kept its attention this year. The March 2026 warning letter to Medisca Inc. (Plattsburgh, NY) cited "failure to establish and maintain an adequate environmental monitoring program for ISO Class 5 areas, including viable and non-viable particle counts." Worse, the agency documented "recurrent excursions in the buffer room" that sat uninvestigated for over 90 days. Ninety days. An excursion that age is no longer a data point — it is a finding.
Suppliers are named in the same breath. The FDA's September 2025 draft guidance Sterile Drug Products Produced by Aseptic Processing puts it plainly: "Component sterility must be verified by the compounding facility unless the supplier provides a Certificate of Analysis with sterility test results per USP <71>." Anyone shipping sterile or purportedly sterile intermediates — bacteriostatic water, sterile saline, lyophilized peptides — should expect their sterility paperwork read line by line.
Deficient Stability Data (42%)
Twenty-four letters cited failures under 21 CFR 211.166 (stability testing) and USP <795> or <797>. The recurring theme: beyond-use dates (BUDs) with nothing behind them. The June 2026 letter to PharmaDox LLC (Houston, TX) rejected a 180-day BUD for a compounded ketamine nasal spray because "the stability study did not include potency testing at the labeled storage condition (controlled room temperature) for the full duration." Close is not enough. The full duration, at the labeled condition, or the date does not hold.
The agency's July 2026 Compounding Risk Alert drew the same line: "BUDs based on extrapolation from similar products without direct testing are unacceptable." Vendors whose research chemicals get repackaged or reconstituted downstream need stability documented per ICH Q1A(R2) or USP <1150>.
Inadequate Component Testing (39%)
Twenty-two letters cited 21 CFR 211.84 (testing and approval of components). The September 2026 letter to Fagron Inc. (St. Paul, MN) found the firm "failed to conduct identity testing on each lot of API used in compounded preparations, relying instead on supplier Certificates of Analysis that did not include full identity verification per USP <1083>." The detail that should worry every supplier: Fagron's own vendor, Letco Medical, had received a 2024 warning letter for the identical deficiency. The chain failed twice at the same link.
The December 2026 draft Guidance on Component Testing for Compounding Facilities (Docket No. FDA-2026-D-0123) sets the bar — "supplier COAs must include the test method, specification, and result for each compendial identity test." A certificate showing only lot number and purity is now a document that fails an audit.
Compliance Cascade: Supply Chain Implications
Here is the mechanism. A compounding pharmacy gets cited for inadequate component testing, and the first thing it does is audit or replace its suppliers. Per-lot Certificates of Analysis carrying identity testing by validated methods — HPLC, FTIR, melting point — have stopped being a differentiator. They are the entry ticket.
The numbers back the shift. The CQCE's 2026 Annual Survey found 78% of compounding pharmacies now require supplier COAs with identity testing by pharmacopeial method, up from 62% in 2024. Can't produce that paperwork? You come off the approved supplier list.
Regulatory Developments in 2027
Three developments will steer near-term enforcement:
-
USP <797> Revision: New environmental monitoring requirements, including real-time particle counting in ISO Class 5 areas, push up demand for sterile components with verified sterility claims.
-
FDA Component Testing Guidance (Final, expected Q1 2027): The draft signals an agency expectation that "all compounding pharmacies must implement supplier qualification programs." Facilities will audit vendors. Vendors should expect documentation audits in return.
-
Federal Register Notice on BUDs: The proposed rule requires every compounded preparation to carry a BUD supported by stability data — raising demand for raw materials with documented stability profiles.
Takeaway
Three systemic weak points, one pattern. Sterility verification, stability documentation, component identity testing — the 2026 letters hit all three, and FDA enforcement now operates as a de facto upstream quality standard. The practical bar for suppliers is concrete: per-lot Certificates of Analysis carrying identity testing, sterility results, and stability data. Meet it, or get shut out of the regulated compounding market.