A Rare Ebola Strain, No Vaccine, and a Gutted Aid System: Inside Congo's Deadliest Outbreak in Years

The death toll from DR Congo's latest Ebola outbreak has surpassed 100. This time, the virus is one for which the world has almost no medical countermeasures — and the safety net that once helped contain such outbreaks has been severely weakened.

On May 17, 2026, the World Health Organization declared a Public Health Emergency of International Concern (PHEIC) over an outbreak of Ebola disease caused by the Bundibugyo virus in the Democratic Republic of the Congo and neighboring Uganda [1]. As of May 18, the outbreak had produced over 300 suspected cases and at least 118 deaths across Ituri and North Kivu provinces, with two additional deaths confirmed in Uganda [2][3].

Unlike the Zaire species responsible for most of Congo's previous Ebola outbreaks, the Bundibugyo virus has no licensed vaccine and no approved therapeutics [1][4]. That gap — combined with armed conflict, surveillance failures, and a dramatic contraction in international aid — has created a crisis that health officials describe as fundamentally different from recent outbreaks that were contained in weeks.

The Virus: Bundibugyo's Deadly Return

Bundibugyo ebolavirus was first identified in 2007 during an outbreak in western Uganda that infected 149 people and killed 37 [5]. It is one of six known species in the Ebolavirus genus, but it has caused only two confirmed outbreaks prior to 2026 — in Uganda (2007–2008) and in DRC's Orientale Province (2012) [3]. The case fatality rate in those outbreaks ranged from 25% to 51% [1].

The current outbreak's fatality rate, based on suspected case data, exceeds 35% — consistent with historical patterns for this strain [4]. But the true rate is uncertain because laboratory confirmation has been limited: as of May 16, only 8 of 246 suspected cases had been confirmed by PCR [1]. Four of those eight confirmed patients died.

The two licensed Ebola vaccines — Merck's Ervebo (rVSV-ZEBOV) and Johnson & Johnson's two-dose regimen — were designed for the Zaire ebolavirus. Animal studies show they do not provide reliable cross-protection against Bundibugyo [4][6]. A handful of experimental Bundibugyo-targeted vaccines exist in early preclinical development, but none have reached human trials [6]. Moderna disclosed in early 2026 that it had begun work on an mRNA vaccine candidate for Bundibugyo, but the timeline for clinical availability remains years away [7].

This leaves the response reliant on non-pharmaceutical interventions — contact tracing, isolation, infection prevention and control (IPC) protocols, and supportive care — the same tools that predated modern Ebola countermeasures [1].

How the Outbreak Went Undetected for Weeks

The presumed index case, a health worker in Bunia, developed symptoms on April 24, 2026 [1][8]. The patient died, and the body was repatriated to the Mongbwalu health zone, a densely populated gold-mining area in Ituri Province [8]. The virus then spread through Mongbwalu and the neighboring Rwampara health zone before anyone identified it as Ebola.

WHO was not alerted until May 5, when reports of a "high-mortality unknown illness" emerged from Mongbwalu General Referral Hospital, where four health workers had died within four days [1]. Samples were sent to the Institut National de Recherche Biomédicale (INRB) in Kinshasa, but initial rapid diagnostic tests — designed to detect the Zaire strain — returned false negatives [3][8]. Specialized testing confirmed Bundibugyo virus on May 14, three weeks after the first death [8].

The detection gap was compounded by co-circulating arboviruses and influenza-like illnesses in the region, which masked initial suspicion [9]. Jeremy Konyndyk of Refugees International told NPR that the disease surveillance architecture in DRC "has been badly weakened," contributing to the delayed identification [8].

A History of Outbreaks — and Whether Containment Is Working

The 2026 Ituri outbreak is the 17th recorded Ebola outbreak in DRC since the virus was first identified in Yambuku in 1976 [5]. The country's experience with the disease is unmatched, but the trajectory of this outbreak raises questions about whether institutional knowledge is translating into faster containment.

Source: WHO / CDC

Data as of May 19, 2026CSV

The deadliest outbreak remains the 2018–2020 Kivu epidemic, which killed 2,287 people over nearly two years and cost the international community over $1 billion to contain [10][11]. At the other end of the spectrum, the 2020 Equateur Province outbreak — caused by the Zaire strain — was declared over after just 130 cases and 55 deaths. The formal end came 42 days after the last confirmed patient tested negative, in accordance with WHO protocol [12].

Health officials have pointed to the Equateur response as a model of swift containment. But the comparison has limits. The 2020 outbreak occurred in a relatively stable region with existing surveillance infrastructure, involved the well-characterized Zaire strain for which vaccines and therapeutics were available, and benefited from a fully staffed international response apparatus [12][13]. The current outbreak shares almost none of those conditions: it involves a rare strain with no countermeasures, sits in a conflict zone, and faces a diminished international support system.

The Funding Collapse

The financial backdrop to the current outbreak is stark. Total US humanitarian funding to the DRC dropped from over $915 million in 2024, the final year of the Biden administration, to approximately $179 million in 2025 — a reduction of roughly 80% [8][14]. USAID's DRC mission was shuttered in 2025, removing the primary US institutional presence for health and humanitarian programming in the country [8].

Source: NPR / USAID

Data as of May 19, 2026CSV

During the 2018–2020 Kivu outbreak, the international community committed $1.18 billion — 92.5% of a $1.28 billion planned budget [11]. Of that, 68% went to public health response and 32% to security and community support operations [11]. The current outbreak has drawn far more modest commitments: WHO released $500,000 from its contingency fund, and the Africa CDC mobilized $2 million, while acknowledging that figure represented "only a small fraction of the urgently needed funds" [14].

The scale of the shortfall is compounded by the nature of the response required. Without vaccines, ring vaccination — the strategy that proved decisive during the Kivu and Equateur outbreaks — is not available [4]. Every case must instead be identified through contact tracing and isolated through labor-intensive field epidemiology, which requires more personnel and more money per case than a vaccine-supported response.

Armed Conflict and Access

Eastern DRC has been wracked by armed conflict for decades. Ituri Province, where the outbreak is centered, hosts dozens of armed groups vying for control of mineral-rich territory [15]. In the week before the outbreak was publicly announced, an attack by armed rebels in Ituri killed at least 69 people [15].

The Africa CDC has warned that "population movements, weak healthcare infrastructure and violence by armed groups in Ituri could complicate containment efforts" [9][15]. The security situation restricts the movement of surveillance teams and limits deployment of Rapid Response Teams to affected health areas [9].

This is not a new problem. The 2018–2020 Kivu outbreak was the first Ebola epidemic in a conflict zone, and the response was marked by attacks on health workers and treatment centers. Over the course of that outbreak, WHO documented nearly 400 attacks on health facilities, resulting in 11 deaths among responders [10]. In the current outbreak, specific data on attacks against health workers have not been compiled in public-facing reports, but the WHO's Disease Outbreak News flagged "critical breaches in IPC protocols" at Mongbwalu General Referral Hospital, where four health workers died early in the outbreak [1].

Healthcare Workers: Infections and Infrastructure

The deaths of four health workers at Mongbwalu General Referral Hospital within days of each other point to systemic deficiencies in personal protective equipment (PPE) availability and IPC protocol adherence [1]. An American physician, Dr. Peter Stafford, also tested positive after treating patients in Bunia. Seven Americans total were transported to Germany for monitoring [3].

The WHO described the health worker deaths as reflecting "critical breaches in IPC protocols" [1], a formulation that points to failures in both supply and training. During the 2018–2020 Kivu outbreak, the CDC invested in strengthening IPC at health facilities across eastern DRC, including training programs and supply chain improvements [16]. Whether the facilities now affected by the Bundibugyo outbreak were among those that received post-2020 capacity-building support is not clear from publicly available information — a transparency gap that complicates accountability.

More broadly, the healthcare worker infections raise the question of whether investments from previous outbreak responses produced lasting improvements or temporary fixes. The INRB's 13 field laboratories deployed during the Kivu response were intended to be maintained for ongoing surveillance and rapid detection [17]. But the weeks-long delay in identifying the Bundibugyo virus suggests that decentralized diagnostic capacity either deteriorated or was never designed to detect non-Zaire strains.

Contact Tracing and the Question of Containment

A key indicator of whether an Ebola outbreak is being contained is the share of new cases that can be traced to a known transmission chain. When a high proportion of cases appear without a known source — so-called "unlinked" or "unknown source" cases — it signals that community transmission is outpacing surveillance.

In the current outbreak, WHO has described a "full epidemiological investigation and trace back exercise" as "ongoing" [9], but has not published data on the ratio of linked to unlinked cases. The three-week detection gap before laboratory confirmation, combined with the virus's spread across at least three health zones and into Uganda, suggests that a significant number of early transmission chains went untraced [1][8].

Rapid diagnostic tests designed for Zaire ebolavirus may not reliably detect Bundibugyo infections, further hampering surveillance efforts [9]. Cases that arrived at health facilities in Bunia and elsewhere seeking medical care — rather than being identified through active case-finding — indicate reactive rather than proactive surveillance [1].

The Structural Argument: Emergency Response Versus Permanent Capacity

Critics of the international Ebola response have long argued that repeated outbreaks in DRC reflect a pattern of underinvestment in permanent Congolese laboratory and epidemiological capacity, with resources instead flowing to expensive foreign-led emergency responses that dissolve when the crisis ends [17].

The evidence is mixed. The INRB, DRC's national reference laboratory, has received sustained international support and played a central role in every modern Ebola response. During the 2018–2020 outbreak, INRB deployed field laboratories using GeneXpert platforms that reduced turnaround times and brought diagnostic capacity closer to affected communities [17]. The Africa CDC has also invested in regional training for Ebola diagnosis [17].

Source: OpenAlex

Data as of Jan 1, 2026CSV

However, much of this investment has been pathogen-specific. The GeneXpert platforms and rapid diagnostic tests deployed during previous outbreaks were calibrated for Zaire ebolavirus. When a different species emerged in 2026, those tools produced false negatives, and samples had to be shipped to Kinshasa for confirmation — a process that took over a week [8][9]. This pattern supports the critique that investments have prioritized narrow, strain-specific preparedness over broad-spectrum diagnostic capacity.

The spending ratio tells part of the story. Of the $1.18 billion spent on the Kivu response, the vast majority funded acute operations — treatment centers, contact tracing teams, vaccination campaigns — with a smaller share directed toward permanent infrastructure [11]. Precise figures on long-term capacity investment versus acute response spending across the past decade are not publicly available in a single consolidated accounting, which is itself part of the problem.

What Happens Next

Congo's health minister announced the opening of three Ebola treatment centers in the affected region [3]. The CDC has surged field experts beyond the approximately 25 staff already stationed in DRC [8]. Africa CDC has called an urgent regional coordination meeting with neighboring countries [9].

But the structural constraints remain: no vaccine, limited therapeutics, ongoing armed conflict, a dramatically reduced international aid footprint, and diagnostic tools that were not designed for the pathogen in circulation. The outbreak has already crossed into Uganda, and WHO's PHEIC declaration reflects the risk of further regional spread [1].

The 2026 Ituri outbreak is not a replay of previous Ebola crises in DRC. It is a test of what happens when a rare pathogen emerges in a context where the tools, funding, and infrastructure that contained earlier outbreaks are either absent or inapplicable. The answer, so far, is that the virus moves faster than the response.