How can this cyber attach happen?

We have all seen now in the news that many major companies around the world has been attacked by WanaCrypt0r 2.0, but this has also brought to light that the NHS, yes the National health service in the United Kingdom, is still using Windows XP.

I am in complete shock that something as important as the NHS could be so irresponsible to not update their systems, instead using a system that is so old Microsoft no longer support it. Whoever is in charge of their IT has some serious questions to answer.

What are your thoughts on this matter? Do the NHS deserve this since they are so outdated?