I'm not sure what you mean by "exploit hoarders," but that got me thinking. [edit: ah, thanks] Institutions weigh costs, and somewhere these hospitals decided

I'm not sure what you mean by "exploit hoarders," but that got me thinking. [edit: ah, thanks] Institutions weigh costs, and somewhere these hospitals decided that having unmaintained, aging information systems, was more cost-effective than either maintaining or upgrading the systems. Thus, problems like this will not go away until NOT-fixing the systems is more expensive than fixing the systems. So what does that take? Fines? Irony alert: the hospital that ignores aging systems and hopes that they never get hacked are not at all unlike people who lack health insurance and hope they never get injured or sick.