DBSchenker and many logistic companies are still running Windows XP on some legacy PC. I have encountered one PC had ransomware too.
We have the security posture of a wet sock.
The market is (weakly) starting to improve, though.
Last time (WannaCry) after the usual initial "you should update" choir, it seemingly came out that after all it was not as vulnerable as initially thought:
https://blog.kryptoslogic.com/malware/2017/05/29/two-weeks-l...
At least the computers running XP did not contribute to spread the malware in that case.