Bad exits can read credentials on non-TLS connections, attempt MITM by forging SSL certificates, and try to de-anonymise hidden-service users via traffic/timing analysis — and state actors (NSA, GCHQ, Europol) have operated exit nodes.

Active threats from malicious exit nodes:

• Reading personal data: logging login data for e-mail/bank accounts on connections not protected by SSL/TLS (mostly old sites without HTTPS). Defence: only use sites with a valid HTTPS certificate.
• Forging SSL certificates: via man-in-the-middle, trying to fake certificates to read "encrypted" traffic. Defence: take certificate warnings seriously and abort on warning.
• Locating hidden services: trying to de-anonymise hidden services and their users through traffic analysis and timing attacks.

State surveillance: Snowden documents confirmed the NSA and GCHQ passively operated exit nodes (the NSA reportedly ran 10–12 high-capacity Tor servers at the time); Europol has run a project aimed at "operational intelligence related to TOR."

Tip: A certificate warning while on Tor is a red flag, not an annoyance — it may be a bad exit attempting MITM.

Layer multiple complementary techniques (k-anonymity, l-diversity, differential privacy), validate by testing, update regularly, and continuously monitor — including by simulating attacks.

Effective protection requires layering complementary techniques, not relying on one method:

• Apply k-anonymity (group indistinguishability), l-diversity (attribute variety), and differential privacy (statistical noise) together.
• Test to validate effectiveness, and apply regular updates to adapt to emerging threats.

And it must be continuously audited:

• Continuous review — track data-access patterns, review re-identification attempts, monitor external data sources, audit protocol compliance.
• Simulated attacks — proactively probe defenses via red-team exercises, penetration testing, linkage-attack simulations, and vulnerability assessments.

Tip: Treat anonymized data like any other security target: defense in depth, plus a red team that actively tries to re-identify it before an adversary does.