It is not on the net, but it is on a LAN that has a firewall somewhere that is leaky.
This because it is cheaper in the short run to string a single physical network and then use vlans etc to attempt to keep medical stuff from talking to accounting or the visitors WiFi.
This so a single overworked nurse can monitor a number of patients from a bank of monitors hooked to a thin client near the ward entrance.