Recently I worked at a 21 bed health care unit for some years, they were and more now strapped for cash, they had a ransomware issue - Half the problem is for far to long IT protection has been the last thing cash has been spent on, always seen as something you don't see - Even after half the unit was in major difficulty due to ransomware this the IT system is still cobbled together with few UPS systems so when they do power outage tests for example often many PC's just go off & recent data lost, actually hard to believe.
Backups not done in any order if at all - Up until the point I left they continued to spend money on anything but IT & I assume may have major issues in the future - If anyone needs to see the look of stress on a face it's the IT guy at this unit - Decent UPS systems, & system protection are low on the list in healthcare I've been to.
Edit: This was a part charity part NHS funded unit.