Right - considering that the reimbursement is not for your monitoring services, but rather for the damage caused, why is that an ethical decision?
I think most people would agree that the value of having your SSN and personal info made available to criminals far exceeds $125.
So why is this an ethical decision? What is the ethical issue at play?