I don’t think you grasp the hodgepodge of obsolete computer systems that are attached to computer networks to run lab equipment, MRI machines, process pharmacy prescriptions, and manage a patient’s chart. Keeping all of this secure and properly backed up is pretty much impossible.
Seriously, I’ve seen machines in use running everything from ancient versions of Sun Solaris to Windows 95.
Second, a ransomware attack isn't going to attack stuff like medical equipment, which wouldn't hold any important files anyway. It's going to attack workstations and servers likely running some version of Windows. If your IT staff can't keep that stuff backed up then you don't have IT staff.
Also regarding the servers and workstations, recovering from ransom ware isn’t as simple as just restoring from a backup. You’re still looking at days of effort restoring backups, reimaging workstations, and validating that everything works.
Yes, restoring a backup requires effort. But surely less effort than losing the data altogether.
> Seriously, I’ve seen machines in use running everything from ancient versions of Sun Solaris to Windows 95.
And yet the parking lot will be full of BMW and Porsches. There's definitely money coming-in; why not spend it on making sure the infra can perform when needed?
You could basically say the spirit of everything you're saying about banks.