I guess not signficantly affected - but we were told that our final test results would have to be posted in a few days and the result we were being given might vary by a day or so [not a result where this matters]

Don't know if it's related or not but I also work in another hospital on IT support and we have recently had a call about visitors to a healthcare website Healthcare Innovation Expo who were being infected with malware, possibly due to the site being hijacked. Luckily the security systems here blocked it before it spread to other machines.

Whenever I'm in a doctor's office or some other medical facility, I'm now in the habit of looking at their information technology. This usually results in my dwelling more on their lack of security than my case of the flu, re injured knee, or whatever brought me there.

My last visit left me alone in a room for about half an hour with a WinXP machine hanging from a wall. Later, when someone arrived to use it, I was quite distracted while talking with her as I kept thinking how easily one could compromise the records of everyone associated with their practice.

"He promised to ask technicians what strain of malware caused the infection,..."

How about asking "How the hell did it get into the system?", then making sure it doesn't/can't happen again?