Patient flow is the movement of patients through a hospital’s care stages, from admission and triage to transfers, treatment, discharge, and follow-up. It is a core operational process that helps determine bed availability, staffing needs, scheduling, and how quickly new patients can be placed into care.
In cyber security, patient flow matters because it is often managed through EHRs, scheduling tools, and workflow software. If those systems are unavailable, delayed, or altered, the hospital can face bottlenecks, unsafe handoffs, or incorrect placement decisions. Attackers may target patient-flow data with ransomware, account abuse, or tampering to disrupt operations or expose sensitive location and schedule information. Defenders reduce this risk with least-privilege access, strong logging, segmentation, data validation, and fallback procedures for manual coordination when automation fails.