EMS already records diversion status and transport time. What does not exist is any mechanism connecting it to a cyber incident.
934,000 patients, a closed laboratory, and an internal emergency posture that already had a name for this.