I hope they did not infect any medical device e.g. a ventilator.

I hope there are no medical devices(e.g. a ventilator) accessible from the public internet with a default password.

Hope, or expect?

Unfortunately, only hope.