Perhaps reasonably ask for 3 years of monitoring, so $980
But those aren't actual costs incurred yet.
This breach, I suspect, makes that less likely to be true. After all, one of the few reasons a new SSN can be issued to someone who has one is “A victim of identity theft continues to be disadvantaged by using the original number”.
Credit real time monitoring should be an entitlement for those whose data is being collected.