Hi, I'm a journalist. I’ve found your passwords and social security number. No need to ask how. Do I have the right to sell those to anyone who wants?
Profiting off a secret password is not intrinsically illegal.
The journalists David Leigh and Luke Harding famously made the WikiLeaks password "SplinterItIntoAThousandPiecesAndScatterItIntoTheWinds" public when they included it in a book. https://en.wikipedia.org/wiki/WikiLeaks:_Inside_Julian_Assan...
They didn't get special permission to sell that manuscript to the publisher.
Besides, all of my passwords contain secret information concerning Swedish defense installations, making them illegal for you to publish. /wink