Maybe they should have kept their systems up to date instead of running XP.
This affected all versions of windows, not just XP. You're right about the updates though.
It's not actually like that. They have a heavily restricted backbone and lots of little isolated networks hanging off it. This is lots of independent cases of idiocy causing infection.
Policy controls, poor patching and user education are the root cause of the NHS problems.