Since 2003
That is the big problem, kit gets bought and forgotten until it breaks. Then you aren't just talking about upgrading the OS, you need a whole lot of extra Cap-Ex for hardware. That is a major cost for companies, even if the hardware was written down over a decade ago.
I know of servers still running SUSE installs from the turn of the century and even a couple of DEC Alpha minis from the mid-90s, because they are still running, the owners of the servers don't see a need to migrate to something newer. Even thought they are mission critical, because they haven't failed in the last decade, they seem to think they won't fail in the next decade either!
I managed to get a small business to migrate from SBS2000 to SBS2010 at the end of last year!
No updates? No worries, it is a server, users can't infect it! :-(
The job of an admin is never easy.