Cyberhaven's Chrome extension was compromised in a Christmas Eve cyberattack, exposing user passwords and session data. Users are advised to update the extension, review logs for suspicious activity, and rotate passwords. Cyberhaven is collaborating with law enforcement to prevent future breaches.