Yup. Retail stores and banks as well. There's plenty of large institutions that are using XP for day-to-day operations.
And people wonder how "easy" it is for those darn hackers to "steal info." It's easy to steal from a house with the door wide open.