Hacking the hospital: medical devices have terrible default security

At the one university hospital where I worked, the IT staff didn’t get involved much at all with devices or computers that controlled devices – that was usually the bailiwick of the Biomedical Engineering Group. IT just provided pipes to the device if the engineering group needed them.