Yes, a lot of hospitals are becoming victims of ransomware. A robust IT system would help, but a lot of it is through phishing attacks, which end up allowing the hackers to gain access. They download data and then hold it for ransom.

A lot of hospital systems struggle through the outage, which cripples the healthcare delivery, but eventually regain access to their systems and don't end up paying the ransom. The hackers then sell the illegally obtained data to other hackers since the healthcare system didn't pay the ransom.

It seems like at least two or three times per year, I'm getting letters stating that my data has been compromised, and I'm offered free credit monitoring.