Honestly these machines and the computers that connect to them should all be in networks isolated from the main hospital networks. Allow a single secure connection for them to relay data to the wider network and allow nothing in.

This is true, I have no sympathy for the ones who put spare on another’s device, but the targets did not deserve that.

Serves them right for using spyware.

Edit. It has correctly been brought to my attention that the targets also had their credentials leaked. They didn’t deserve that. That said, fuck the people who were installing spyware in other people’s devices.