Apple homekit

someone obtained unauthorized access to my apple account using an old device i forgot to remove as a trusted device. My home router was attacked, and VPN was added to the router control settings. If they had the same VPN in their home, would they be able to use my devices in their home via homekit and the various addon apps? There is evidence that my voice data was being obtained from Siri. I discovered the shortcuts app on my phone, and have evidence that the suspect has hidden cameras in their home and accessed my iMac, macbook pro, and iPhone 7+ remotely.