It's hard to follow what OP is trying to describe. They used LastPass to generate a password for their router but then accuse them of sniffing passwords?
I also have no idea what they're referring to regarding the Facebook export: "It's in the old Faceook downloadSecurity_and_login_information in a file called numbers that may be a profile user id".