When I was working security for a hospital they wanted to send imagery from an MRI (or maybe CAT, I forget) upstairs to be interpreted without allowing any network traffic to be able to reach the host machine because it was running XP. I asked why, and they told me that in order to replace it the vendor was requiring a $7 million replacement of the whole MRI.