The Coronavirus Disease 2019 (COVID-19) pandemic has resulted in widespread disruption to the healthcare industry. Alongside complex issues relating to ensuring sufficient healthcare capacity and resourcing, healthcare organizations and universities are now also facing heightened cyber-security threats in the midst of the pandemic. Since the outbreak began, various healthcare providers and academic institutions across the world have been targeted in a variety of complex and coordinatized cyber-attacks. International and national regulatory bodies have stressed the urgent need for healthcare providers and universities to protect themselves against cyber-attacks during COVID-19, recognizing that a growing number of cyber-criminals are seeking to capitalize on the vulnerabilities of the healthcare sector during this period. This includes a desire to steal intellectual property such as data relating to COVID-19 vaccine development, modelling and experimental therapeutics. It is therefore essential that healthcare providers and universities ensure they are informed, protected and prepared to respond to any cyber-threat. This article outlines key COVID-19 cyber-security principles for both healthcare organizations and academic institutions.