Cryptosporidium is a leading global cause of waterborne disease, with many reported outbreaks related to main water supplies. In August 2019, an outbreak of cryptosporidiosis involving 80 cases occurred among 114 vacationers in a small municipality located in the Tuscan-Emilian Apennines, north-eastern Italy. After excluding a potential food-borne outbreak, the epidemiological investigation focussed on the hypothesis of a waterborne outbreak. This was confirmed by the finding of Cryptosporidium oocysts in stools of the cases and in water samples from the municipal water network. Molecular characterisation revealed the zoonotic species Cryptosporidium parvum as the causative agent. A single subtype (IIdA25G1) was found among all cases, and in one of two positive water samples. The municipality’s water supply used spring water that only received a disinfection treatment insufficient to inactivate the parasite. Possible entry means into the water mains were found through further environmental investigations. As these types of water supplies are particularly vulnerable to various environmental factors, a control system based on the risk assessment of each phase of the water supply chain is required to guarantee water safety. Effective methods for detection of protozoan pathogens, which are generally excluded from routine water supply analysis, should be applied.