In March 2012, a second outbreak of Cryptosporidium parvum affected children following a stay at a holiday farm in Norway; the first outbreak occurred in 2009. We studied a cohort of 145 schoolchildren who had visited the farm, of which 40 (28%) were cases. Cryptosporidium oocysts were detected in faecal samples from humans, goat kids and lambs. Molecular studies revealed C. parvum subtype IIa A19G1R1 in all samples including human samples from the 2009 outbreak. A dose–response relationship was found between the number of optional sessions with animals and illness, increasing from two sessions [risk ratio (RR) 2·7, 95% confidence interval (CI) 0·6–11·5] to six sessions (RR 8·0, 95% CI 1·7–37·7). The occurrence of two outbreaks 3 years apart, with the same subtype of C. parvum, suggests that the parasite is established in the farm's environment. We recommend greater emphasis on hand hygiene and routines related to animal contact.