If a hospital can't operate because some asshole was able to remotely hack it bad enough to basically shut it down, we might need to rethink how things are run.
Some hospital networks just continue to operate slower to the detriment of their patients and just lie to everyone so that nobody finds out they were hacked.
This also doesn't just happen and is apparent. They probably spent way too much time trying to fix the problem before diverting to older ways while the problem is being diagnosed and fixed.
Happened in Germany recently. They could continue to operate since everything is still backed up in paper, but everything went slower and new emergency patients couldn't be accepted.
It is shocking that the digital level of the hospitals is still in the 70s.
It is about funding. The corners IT has to cut is because lack of money.
Also the amount of legacy operating system to keep hardware like scanners running is a lot. Medical devices are delivered with a workstation that never updates. It is hard to justify buying a new mri of 1.5 million when the accompanied workstation is outdated.
Sure you can vlan and firewall the hell out of it. But they still have a large attack surface.