Here's my real question:

I'm a little apprehensive that there is some unauthorized usage of my router/computer/phone. I have an Asus RT-AC66U, a macbook pro and an iPhone. I'm hoping someone here might be able to help.

I got a phone call from a "no caller id" a couple of weeks ago from some clearly scammers trying to get me to go to fastsupport.com and do something or other, I didn't, but I stayed on the phone with them for 10 minutes leading them on. A week or so later I got an email from Apple saying I needed to change my AppleID password and security questions so I did, and then I needed to select my device from a list, and there was a device listed called "Neftali Lira's iPhone", definitely not mine but I thought it might have created a randomly generated option to ensure I picked the right device. Another week later I got overage notices from my ISP because I had used about 100gb more than normal this month. Sensing something was afoul I logged into iCloud and realized Neftali Lira's phone was still listed under my devices on find my iphone. I removed the device from my account, reset my phone to factory and restored my computer to a time machine backup from 3 months ago. Changed all my passwords, reset the router, changed its password. The next morning I got a phone call from a "no caller id", no one on the other end, so I hung up. I logged into my router to monitor traffic and noticed that 4.5gb had been downloaded and uploaded when I was not using the internet and the activity stopped the exact minute I got the phone call. Either very coincidental or very suspicious.

I did some research at this point, fastsupport.com is clearly a phishing scam, but I never downloaded anything from their website, only talked to them on the phone, I might have visited the website on my phone out of curiosity, I remember what it looks like but I can't remember from which device I looked at it, can they get into my devices from just a phone call or me visiting the site? My router, RT-AC66U has some old firmware that I was using and from what I've read I think was vulnerable, I was running: 3.0.0.4.374.xxxx, I've just now updated to 3.0.0.4.380_xxxx and changed the passwords again. I don't know anything about this type of security stuff, does any of that seem suspect to anyone? Is it possible they got access to my data? Am I safe now? Thanks in advance for any help.

Addtionally... apparently my ip might have been flagged for spam, which is making it impossible for me to post the question on the regular forum??? gahhh.