https://cointelegraph.com/news/tor-confirms-attack-may-have-deanonymized-users
In a July 30 blog post, Tor confirmed that several entry nodes may have been run by a nefarious party attempting to identify Tor users, and they appear to have been successful.