If pedantry in the law has influenced your ethics that much, it's hard to call those "ethics".
For a start, the company can be unequivocally identified, because they bought a block of IP addresses. The individual cannot, because the specific IP cannot identify an individual.
This isn't cognitive dissonance, and the massive distinction here is that a company is being held to account, not an employee.