And with some hospitals still running Win XP, it's easy to get a foothold on their network!
I'm working in that space, and sampling from the ones I've dealt with, I'd replace some with most.
Some of the ones I deal with are also running those XPs with old IE versions, 6 & 7. This is because they bought, then never upgraded, systems that won't run right with newer browsers.
Wow, just wow.
If someone ever hacks an active surgery robot it's going to be Saw meets Snow Crash, and not in a good way.