Just flashed on my screen “password compromised” is this a problem?

Due to the system architecture of iOS/iPadOS, unless jailbroken (don’t go there!), your iPad is not susceptible to traditional malware infection per-se. However, as with all computer systems, there are still vulnerabilities and exploits to which you remain vulnerable.

Browser-based attacks can largely be mitigated by installing a good Content and Ad-blocking product. One of the very best and most respected within the Apple App Store - designed for iPad, iPhone and Mac - is 1Blocker for Safari.

https://apps.apple.com/gb/app/1blocker-for-safari/id1365531024

1Blocker is highly configurable - and crucially does not rely upon an external proxy-service of dubious provenance. All processing takes place on your device - and contrary to expectations, Safari will run faster and more efficiently. 

Unwanted content is not simply filtered after download (a technique used by basic/inferior products), but instead undesirable embedded content blocked form download. A further benefit on metered services, such as cellular connections where you data may be capped or chargeable, this not only improves speed but also saves you money.

A further measure to improve protection is to use a security-focused Recursive DNS Service in preference to automatic DNS settings. This can either be set on a per-device basis in Settings, or can be set-up on your home Router. I strongly recommend using one of the following services - for which IPv4 and IPv6 server addresses are listed:

Quad9 (recommended)

9.9.9.9

149.112.112.112

2620:fe::fe

2620:fe::9

OpenDNS

208.67.222.222

208.67.220.220

2620:0:ccc::2

2620:0:ccd::2

Cloudflare+APNIC

1.1.1.1

1.0.0.1

2606:4700:4700::1111

2606:4700:4700::1001

Use of the above DNS services will help to shield you from “known bad” websites and URLs - and when used alongside 1Blocker, or other Content Blocker provides defense in depth.

Not necessarily. There are many spoofers who like to scare you.

Keep in mind:

1. Never give your password to anyone unless they are a trusted onsite tech, and change it when you are done with them.
2. Never give personal information to anyone who calls or emails you.
3. Trust only websites with an https:// and a lock icon in the browser link that is closed.
4. Keep an eye on the camera light on the frame of the machine when you make a video call, and make sure it is gone all other times when you are inactive.
5. Change your password regularly, and do not use any dictionary passwords in any language. Mix cases, and add funny characters whenever allowed by the authentication of a site.
6. Avoid using the same password for multiple sites.

See what Apple reports about the state of your passwords: Settings > Passwords > Security Recommendations