Yep. Happens all the time in healthcare IT. "The doctor is one of our multi-million-dollar revenue generators, so we let it slide" is the excuse. Every time.

I've personally written up a chief radiologist before for it. Zero action, because "he made the facility $6m+ last year" in rural nowhere.

It was actually one of the helpdesk's interview questions - "how do you handle responding to a doctor whose machine is full of porn?"

No wonder years later they got slammed by ransomware.