I would assume if some guy you don't know in Hong Kong can get your passwords then yes a guy at your ISP could get them too.