I was working for the company that managed the systems of the Royal Marsden and Chelsea and Westminster hospitals ten years ago. I insisted they patched their Windows servers, and I warned they could be affected by a ransomware worm. After several months of inaction, Wannacry hit, putting them off line for a couple of days. I dont know how this particular attack unraveled, but it seems not much has changed in the NHS.