This is a case study on bomb threat and evacuation process at KPJ Seremban Specialist Hospital (KPJSSH) in Negeri Sembilan, Malaysia. This study identifies potential legal risks arising from bomb threat and evacuation process in a private hospital. Bomb threat is a crisis situation that need to be managed by the hospital. Bomb threat and the evacuation process can create legal liabilities to the hospital. To identify the potential legal risks, in‐depth content analysis was conducted on KPJSSH incident report, HICS guideline and legal judgment obtained from legal journal for case laws. The study found eight potential legal risks. Among the potential legal risks are failure to provide safe escape route and leak of patient medical information during patient transfer. Failure to provide safe escape route falls under Occupier’s Liability (Law of Tort). Leak of patient medical information during patient transfer falls under Breach of Medical Confidentiality (Law of Tort). The study finds that it is not sufficient for a hospital to identify legal risks. Knowledge of relevant branch of law is critical to understand hospital legal liabilities during crisis.