If bad code causes the failure of somebody's medical equipment, then the company that released said code should absolutely be held responsible. I wouldn't go so far as to hold individual developers responsible because there should be a complex QC process in place before life-critical software makes it anywhere near market, but certainly the company as a whole, and potentially whatever executive fast-tracked the release of said software, is at fault.