MFLRC - MF License & Regulatory Consultants

September 2, 2026 · Quality Assurance

Container Closure Integrity Testing: Lessons From the Omnitrope Cracked Cartridge Recall

By Mussarat Fatima

Quality AssurancePharmaceuticalsBiologicsGMP
Container Closure Integrity Testing: Lessons From the Omnitrope Cracked Cartridge Recall

In July 2026, Sandoz Canada recalled two lots of Omnitrope, an injectable human growth hormone, after complaints of cracked and leaking glass cartridges. Health Canada classified the recall as Type I, its most serious category. The problem was not the drug substance. It was the container that held it.

For any company that fills injectables, biologics, vaccines or prefilled devices for the Canadian market, this recall is a plain lesson. Release testing that focuses on the molecule can pass a batch while the package that protects it is quietly failing. Container closure integrity, often shortened to CCI, is the discipline that catches this before a product reaches a patient.

This article explains what container closure integrity testing is, why cracked cartridges and delaminating glass keep triggering recalls, which test methods regulators now expect, and how a strong CCI, visual inspection and supplier audit programme keeps injectable products off the recall list.

Executive summary

Container closure integrity is a critical quality attribute for every sterile and injectable product. The Omnitrope recall is a reminder that a package failure can pass drug release testing yet still put patients at risk. The key points below set out what changed and what to do about it.

  • What it is. Container closure integrity is the ability of a package to keep its contents sterile and protected and to prevent leakage over the whole shelf life of the product.
  • The trigger. The Omnitrope recall, RA-82295, was a Type I recall dated 8 July 2026, caused by cracked and leaking glass cartridges, not by the drug itself.
  • Method shift. USP General Chapter <1207> now prefers deterministic test methods, such as vacuum decay, high voltage leak detection, tracer gas and headspace analysis, over probabilistic methods like dye ingress, wherever a maximum allowable leakage limit can be set.
  • The EU bar. EU GMP Annex 1, in force since 25 August 2023, expects container closure integrity to be assured and, where feasible, 100 percent integrity testing of containers closed by fusion.
  • What good looks like. A defensible programme combines CCI method validation, visual inspection to USP <790> and <1790>, incoming glass qualification, transport qualification and container supplier audits, all tied together by real corrective and preventive action.

What is container closure integrity?

What it is. Container closure integrity is the ability of a container closure system, for example a vial with a stopper and seal, a pen cartridge or a prefilled syringe, to maintain a sterile barrier and to prevent loss of product or ingress of contaminants across the product shelf life.

Why it matters. A cracked cartridge, a loose stopper, a delaminated vial or a micro leak can let microorganisms, moisture or oxygen in, or let drug out. For a sterile injectable the result is contamination risk, sub potent dosing, or particulate injury to the patient.

What to do. Define container closure integrity as a critical quality attribute for the product, set a maximum allowable leakage limit based on the product and patient risk, and validate a test method that can reliably detect leaks at or below that limit.

Under ICH Q8, a critical quality attribute is a property that must be controlled to ensure product quality. Integrity of the container closure system sits squarely in that definition for sterile products, because the package is part of what keeps the medicine safe. USP General Chapter <1207> frames integrity as a lifecycle activity, from package design and selection, through method development and validation, to routine testing and stability. Treating it as a one time launch check is one of the most common and most costly errors we see.

Why injectable containers fail: the Omnitrope lesson

What it is. These are the failure modes behind most container closure recalls: glass cracks and breakage, glass delamination, stopper and seal defects, thermal and transport stress, and component variability from suppliers.

Why it matters. The Omnitrope cartridges cracked and leaked, which Health Canada linked to three distinct patient risks: infection from contamination, glass particle injury such as irritation and abscesses, and reduced effectiveness from under dosing over a period of weeks. One container defect created three separate hazards.

What to do. Map the failure modes for each container format you fill, then build a specific control for each one rather than relying on a single test at the end of the line.

Failure modeWhat it looks likePatient riskPrimary control
Glass cracks and breakageFractured or leaking cartridges, vials or syringesLoss of sterility, contamination, leakage, under doseIncoming glass qualification, CCI testing, gentle handling, transport validation
Glass delaminationLamellae, flakes or particles shed from the inner glass surfaceParticulate injury, subvisible and visible particlesType I borosilicate selection, formulation pH and ion control, USP <790> and <1790> inspection
Stopper or seal defectsMissing, misseated or damaged stoppers, loose crimp sealsMicro leaks, loss of sterilitySeal force control, residual seal force testing, 100 percent CCI on sterile lots
Thermal or transport stressCracks from freezing, pressure change, drops in distributionCracked containers reaching patientsCold chain, packaging and transport qualification
Component variabilityOut of specification dimensions or glass defects from the supplierRecurring defects across multiple lotsSupplier audits, written specifications, incoming inspection

The Omnitrope case is a classic container failure. Glass cartridges for pen injectors are thin walled and are handled repeatedly by patients, so a defect that drug release testing never touches can still crack in distribution or in use. That is why container closure integrity has to be treated as a lifecycle activity that runs from design through stability and transport, not as a single test performed once.

Container closure integrity test methods

What it is. CCI test methods fall into two groups. Deterministic methods directly and quantitatively measure a physical property linked to leakage. Probabilistic methods infer the chance of a leak from a sequence of events and give a pass or fail result.

Why it matters. USP <1207> made deterministic methods the preferred choice wherever a maximum allowable leakage limit can be established, a position effective since 1 August 2016. Inspectors increasingly expect deterministic data for sterile products because it is quantitative and repeatable.

What to do. Choose a method matched to your product and package, then validate it against certified positive controls with known leak sizes at or below your leakage limit.

MethodTypeHow it worksBest suited to
Vacuum decayDeterministicMeasures the pressure rise in an evacuated test chamber as air or product escapes a leakVials, syringes, cartridges, blisters
High voltage leak detectionDeterministicMeasures electrical conductivity or resistance across the container wall to locate a leakLiquid filled vials, cartridges, ampoules, syringes
Tracer gas, helium leakDeterministicQuantifies helium escaping from a filled and sealed containerLow leakage limits, method development, worst case studies
Headspace gas analysisDeterministicUses laser measurement of headspace pressure or gas to infer loss of integrityVials with controlled headspace, lyophilised products
Dye ingress, immersionProbabilisticContainer immersed in dye under vacuum or pressure, then checked visually or by spectrophotometryFallback where no deterministic method fits
Microbial ingressProbabilisticContainer challenged with a microbial suspension, then incubated and checked for growthMethod suitability and historical benchmarking

Probabilistic methods such as dye ingress and microbial ingress are still permitted where no deterministic method fits, but they are destructive, more variable and harder to defend in an inspection. For a new sterile product, expect to justify your method choice against USP <1207> and to link the chosen method to your maximum allowable leakage limit. If you cannot show that your method detects a leak at your defined limit, the method is not fit for purpose.

What Annex 1 and USP expect

What it is. These are the rules that govern container closure integrity and particulate control for sterile injectables in Canada, the European Union and the United States.

Why it matters. Health Canada builds its expectations on Good Manufacturing Practices and international standards, while EU GMP Annex 1 and the USP chapters set the bar that inspectors actually use. Building to the strictest applicable standard protects you across markets.

What to do. Map your programme against each standard below and close any gaps before an inspection, not during one.

Standard or referenceWhat it governs
Health Canada GMP Guide (GUI-0001)Canadian Good Manufacturing Practices for drug manufacture, including packaging and quality control
EU GMP Annex 1 (2022)Sterile product manufacture, container closure integrity assurance and 100 percent integrity testing of fusion sealed containers
USP General Chapter <1207>Container closure integrity evaluation and selection of deterministic versus probabilistic methods
USP <790> and <1790>Visible particulates in injections and guidance on visual inspection of injectable products
ICH Q8, Q9 and Q10Quality by design, quality risk management and the pharmaceutical quality system

Under EU GMP Annex 1, container closure integrity must be assured, and containers closed by fusion, such as glass or plastic ampoules and blow fill seal units, should be subject to 100 percent integrity testing. Other containers should be sampled using an approved acceptance level and, where appropriate, integrity tested during stability. USP <790> requires injectable products to be essentially free of visible particulates, and USP <1790> gives detailed guidance on how to design and run the visual inspection that supports it.

How the Omnitrope failure should have been caught

What it is. These are the layered controls that catch a cracked cartridge before release and detect it again in the field if one slips through.

Why it matters. No single test is enough. Inspectors expect defence in depth, and a corrective and preventive action after a recall has to rebuild every layer that failed, not just the one that was tested last.

What to do. Combine design, incoming, in process, release and stability controls so that a defect has to defeat several barriers before it can reach a patient.

  • Container and component design. Select Type I borosilicate glass, qualify the cartridge design for the pen device, and define the critical dimensions that must be met.
  • Incoming glass qualification and supplier control. Set written specifications, review certificates of analysis, perform dimensional and cosmetic inspection, and audit suppliers on a risk based schedule.
  • In process controls. Control fill line handling, seal and crimp force, and use camera based inspection to reject defective units during filling.
  • Visual inspection. Run 100 percent inspection to USP <790> and <1790> for particulates and cosmetic defects, using trained inspectors, defect libraries, defined lighting and periodic re qualification.
  • CCI method validation. Validate a deterministic method such as vacuum decay or high voltage leak detection, and apply it at release and during stability.
  • Transport and distribution qualification. Qualify packaging with drop, vibration, pressure and temperature cycling that reproduces the stress a cartridge meets in real distribution and patient use.

A strong corrective and preventive action after a cracked cartridge recall does not stop at sort and replace. It performs true root cause analysis to establish whether the cause was glass quality, forming stress, handling, or an inadequate design margin. It quantifies the scope across all affected lots, adds or tightens the CCI and incoming controls that would have caught the defect, and then verifies effectiveness with data before the action is closed. A CAPA that closes without effectiveness evidence is how the same defect returns a year later.

Container closure integrity compliance checklist

Use this checklist to pressure test your own programme. It is the basis of the downloadable worksheet at the end of this article.

  • Define container closure integrity as a critical quality attribute and set a maximum allowable leakage limit based on product and patient risk.
  • Select a validated CCI method suited to the container format, preferring deterministic methods such as vacuum decay, high voltage leak detection, tracer gas or headspace analysis per USP <1207>.
  • Validate the CCI method against certified positive controls with known leak defects at or below the leakage limit.
  • Apply 100 percent integrity testing to containers closed by fusion and apply CCI during stability for other formats, in line with EU GMP Annex 1.
  • Run 100 percent or statistically justified visual inspection to USP <790> and <1790>, using trained inspectors, defect libraries and periodic qualification.
  • Qualify incoming glass and closures with specifications, certificates of analysis, dimensional and cosmetic acceptance levels, and a delamination risk assessment.
  • Audit container and closure suppliers on a risk based schedule and hold them to written quality agreements.
  • Qualify transport and distribution with drop, vibration, pressure and temperature cycling that reproduces real field stress.
  • Trend complaints, deviations and rejects for container defects and escalate to CAPA with genuine root cause analysis.
  • Keep a mock recall procedure current so a real container recall can be run quickly and traceably.

Common mistakes

  • Treating drug release testing as proof the package is sound. Container closure integrity is a separate attribute.
  • Relying on dye ingress alone when a deterministic method could set a defensible leakage limit.
  • Validating CCI once at launch and never rechecking during stability or after a component or supplier change.
  • Buying glass on price without qualifying the supplier or assessing delamination risk.
  • Inspecting for particulates without trained inspectors, defect libraries or documented lighting and inspection time under USP <790> and <1790>.
  • Skipping transport qualification, so cracks appear in distribution rather than being caught on the line.
  • Closing a container recall with sort and replace instead of root cause CAPA, so the defect returns.

Frequently asked questions

What is container closure integrity testing?

Container closure integrity testing is a set of methods used to confirm that a container closure system keeps its contents sterile and protected and prevents leakage. It measures whether the package can maintain a barrier against microorganisms, moisture and gases across the shelf life of the product, and it is distinct from testing the drug itself.

Why was Omnitrope recalled?

Sandoz Canada recalled two lots of Omnitrope 5 mg per 1.5 mL somatropin after complaints of cracked and leaking glass cartridges. Health Canada classified it as a Type I recall, RA-82295, dated 8 July 2026. The cracked cartridges created risks of contamination and infection, glass particle injury, and reduced effectiveness from under dosing.

Is dye ingress still acceptable under USP <1207>?

Yes, but it is no longer the preferred method. USP <1207> prefers deterministic methods wherever a maximum allowable leakage limit can be established, because they give quantitative and repeatable results. Dye ingress and other probabilistic methods remain acceptable where no deterministic method fits the product and package, provided their suitability is justified.

Does Health Canada require 100 percent container closure integrity testing?

Health Canada expects container closure integrity to be assured through validated methods as part of Good Manufacturing Practices. The clearest quantitative expectation for 100 percent integrity testing of fusion sealed containers comes from EU GMP Annex 1, which many Canadian sterile manufacturers apply as the current standard. The right sampling and testing plan should be justified by product risk.

What is the difference between CCI testing and visual inspection?

Visual inspection detects visible defects and particulates in the finished unit, such as cracks, particles or misseated stoppers, under USP <790> and <1790>. Container closure integrity testing measures whether the sealed system actually leaks. The two are complementary, and a robust programme uses both rather than treating one as a substitute for the other.

How often should container closure integrity be tested?

Container closure integrity should be assessed at method validation, at product release according to a risk based plan, during stability studies to confirm the package holds up over shelf life, and again whenever a component, supplier or process changes. Treating it as a single launch activity is a common gap that inspections and recalls expose.

What standards apply to container closure integrity in Canada?

Canadian sterile manufacturers work to Health Canada Good Manufacturing Practices, and typically apply EU GMP Annex 1 for sterile product expectations, USP <1207> for integrity method selection, and USP <790> and <1790> for particulates and visual inspection. ICH Q8, Q9 and Q10 frame the work as risk based lifecycle management.

How MFLRC can help

A cracked cartridge is a container closure failure that drug release testing rarely catches. MFLRC helps injectable, biologic and vaccine manufacturers build the programmes that prevent it. Our pharmaceutical validation services cover container closure integrity method validation and packaging and transport qualification. Our quality assurance and quality control services design visual inspection programmes to USP <790> and <1790>, incoming glass qualification and specifications, and our audit services cover glass and closure supplier audits and CAPA review.

Whether you manufacture in Canada or import a finished sterile product into the pharmaceutical market, we can run a gap assessment against Annex 1 and USP, help you select and validate a deterministic CCI method, and build the SOPs and supplier controls that keep your product off the recall list. For related reading, see our articles on the EU GMP Annex 1 contamination control strategy and on cleaning validation and a Type I cross contamination recall.

If a recent deviation, complaint or recall has put your container closure system in the spotlight, our regulatory affairs, licensing and import and export team can help you respond with a defensible remediation plan.

Conclusion

The Omnitrope recall is a reminder that the container is part of the medicine. A batch can meet every drug specification and still reach patients in a package that leaks. Container closure integrity, validated with the deterministic methods that USP <1207> now prefers and supported by visual inspection, incoming glass qualification, transport qualification and supplier audits, is what stands between a filling line and a Type I recall. Build the programme before an inspector or a complaint asks you to prove it works.

Sources and references

Downloadable Resource

Container Closure Integrity Compliance Checklist

A one page checklist to pressure test your CCI, visual inspection, incoming glass and supplier audit programme against USP <1207>, USP <790> and <1790>, and EU GMP Annex 1.

File: MFLRC-Container-Closure-Integrity-Checklist.pdf

Fill in your details below and the download link will appear right away.

Share with others

Tags

PharmaceuticalsHealth CanadaQuality Management SystemCAPA
Book a consultation