OK from the first paragraph. Use mfa or authentication.
This all seems ridiculous or you’re over exaggerating. No hacker has this much information unless it was there for them.
Use mfa. Your TV, asks if devices can access. Log into your main internet admin usually like 10.0.0.1 and see what devices are connected. Remove suspicious ones and re add, change your password.
Probably a scam, either way it’s nothing to worry about. Use a VPN, stop sharing torrents after they are done, and check if your network configuration IS on a static ip. Your friend doesn’t seem to be too knowledgeable and shouldn’t leave his torrents running 24/7.