This isn't surprising, and not the first time it's happened. NHS is chronically underfunded, so its IT budget is small. Many systems aren't often upgraded and continue to live with vulnerabilities.
Probably unrelated, but a Dutch dental care chain (120 practices) was also hit by targeted ransomware today.