The American Red Cross is running computers with an obsolete and unsupported operating system, and using them to collect HIPAA protected personal health and other information! If a Russian or North Korean hacker can break your system because you’re using 16 year-old software that hasn’t been supported for two years, then you as an organization have failed.