Of course it's disgusting that a bunch of scum would target a hospital but they're not normal, they live on the other side of the law where morals are already bent and so they have not issue with discarding them completely.
Howvever this is where we end up when technology is simply thrown into situations and is not properly set up or maintained. You wouldn't let your neighbour service your car's engine and MCU, so why do people insist of installing IT kit and letting "the friend of a mate's brother who did some Windows installs" set up entire IT kit?
IT is no longer just putting a few computers on a few desks, shoving a Novell Netware server in and everything's funky! That was 35 years ago now, gazillions of bytes of data have been processed and stored and it's all worth something to someone, this is what these sickos know all too well.
Your data is basically worthless to anyone other than you as data, but as a exploitable it's priceless. About time people started to take IT and their data way more seriously, chucking a copy of Bitdefender on your work PCs will not stop these scum, installing IT kit properly and doing the proper job, and that I'm afraid means paying ( in "beer" or money ) for professional IT people to do it right. You'd pay a plumber or a mechanic a proper wage and expect a proper job, don't shortchange on your IT kit.
Having said that I hope the hospital has some way to recover and hopefully gets some help to secure their kit, as this is not fair on anyone.