I would think that an external drive for a hospital probably is not doable. Especially if they are using a mainframe as a serve to PC’s that are capable of accessing it as needed.
You are correct as I got caught in 'thread creep', but that is not to say that there are not appropriate protection schemes available. My point is that the bad guys are out there and the medical first responders are vulnerable, especially at this time of social separation. No protection scheme is perfect but at least try to close vulnerabilities like password being '12345abcde' or worse!