Things like POS terminals and ATMs usually use Windows XP Embedded (if they're on XP at all). XP Embedded is still under support until July 12, 2016. However,

Things like POS terminals and ATMs usually use Windows XP Embedded (if they're on XP at all). XP Embedded is still under support until July 12, 2016. However, even if these systems are, for whatever reason, running a consumer version of XP which is slated to end extended support on April 8, 2014, they are most likely not connected to the internet and therefore safe from external threats. That's just the best case scenario anyway. As we saw with the Target breach, they obviously did not have the required network segmentation in place. Any PCI compliant company is going to have their POS terminals running on an isolated network. This is hardly a reason to justify not upgrading though.