Ambulance diversion is the redirection of emergency medical transport to other facilities when a hospital cannot safely receive or care for additional patients. It may be needed when staffing, beds, equipment, or essential systems are unavailable.
During a cyber incident, disruption to clinical records, communications, or other hospital systems can make normal operations unsafe or unreliable. A hospital may then coordinate with emergency services to send ambulances elsewhere while it assesses the disruption and restores care. Diversion is a continuity measure, not evidence by itself that patient data was stolen or that a particular type of attack occurred.