I can give some insight into this I guess.
I work in the Internet/Media Privacy and Security sector.
Leolist didn't "hack" your phone. The only way Leolist could have had access to your private information would be if you had signed up with it. Visiting a website doesn't give them enough info for the to "hack" you, this isn't the Matrix trilogy. A website can’t do anything actively to your device without your consent these days besides gather basic metadata (which browser used and IP address), the most a website can get without any input is a rough location where you are and that you’re using Firefox or something. Also maybe basic PC specs. If you are saying that you did
not registered for anything, we are down to two possible scenarios:
1) An escort that you have contacted is trying to extort you. This is most likely what happened and it can also be revenant to scenario #2.
2) You have been pwned. Since you are saying you didn't sign up to LeoList and there hasn't been any security breach reported from them, it's most likely your phone number (I assume you use your personal number for hobbying), email or other "social media/newsletter/ordinary information" has been leaked. You can find if you have been pwned here:
https://haveibeenpwned.com/. I recently had my Netflix and Hulu accounts hacked thanks to being pwned. It's shit but happens to everyone.
If your phone number is registered within any social media, it's also very likely someone googled your number and found out your info.
At the end, this is a simple case of extortion. LeoList wouldn't come after you. What are they going to gain from extorting a random civilian? If Justin Trudeau had used LeoList and, somehow, that information was made available... Now that would make more sense, right?
My advice to you is: 1) Don't use your personal number/email/device for hobbying. 2) Check if you have been pwned. 3) Be careful booking unknown SPs. 4) Report the extortion to police (if you are legitimately worried about it).
Good luck.