i would say true, majority of hospital environments are unaware of what the devices are running. disclosure I am a Solution Architect for a PACS Vendor for 15 y

i would say true, majority of hospital environments are unaware of what the devices are running. disclosure I am a Solution Architect for a PACS Vendor for 15 years, knows the ins and out of hospital equipment and networks/systems at many of the largest hospitals in USA and some international. malware infections in hospitals has risen and definitely more targeted to harvest patient data or take down the system. never heard of a device like they mentioned getting hacked like an insulin pump in the "field" the better systems are already locked down and are treated with limited access, following HIPAA, ISO, FDA compliances. IT/networking monitor the equipment as any other equipment. then again many old modalities (ct/xray scanners) are running old versions of windows NT or 2000 or XP that have never been patched with MS updates nor have they ever had any AV installed. and sometimes you need to import data from small facilities, these have potential to be malware infected. this data is usually imported directly into the system, so if precautions arent already setup on that system then you just infected your system