It's been my standing policy of many years now never to financially reward any act of coercion, violence, etc. undertaken against me or anyone else in bad faith and ESPECIALLY if done with the intention of extracting a payment (as in blackmail, kidnapping, extortion, protection schemes, ransomware, or other threats of harm to be done or continued if money is not paid).
For acts of security compromise undertaken in good faith (or unwittingly), I've also had a standing policy of many years to offer small financial rewards to those who responsibly disclose to me those vulnerabilities. If you are seeking to make a responsible disclosure, please send a broad description of the type of disclosure you are trying to make but importantly containing NO SENSITIVE DATA IN THE ACTUAL MESSAGE to "responsibledisclosure" at this same domain name. Someone will reach out to you with an appropriate way for you to perform the disclosure safely.