This must be one of those situations that keep you up at night even at the age of 105, the event being 50 years in the past. I am really glad my job has nowhere near that kind of responsibility.
That is horrifying. Windows Server 2003 is 8 years past EOL meaning it hasn’t received any security patches since then. For such a highly regulated industry your entire tech department need’s launched into the sun.