Are you asking whether you should release the service to your customer, as you asked in your OP?

I would say yes. Your customer held up their end of the bargain by paying you, which you were able to confirm. It's not really their fault you got compromised. You could get sued for not delivering, even.