Hi all,
Today, NDR issued a press release with more details on the subject:
https://www.ndr.de/der_ndr/presse/mitteilungen/Ermittlungen-im-sogenannten-D...
It mentions that the (German) Federal Criminal Police Office identified twice the respective node that connected a suspect to Tor, and twice the entry node used by the Ricochet messenger.
It cites multiple sources who claim to know about broad surveillance measures against Tor servers. Matthias Marx, spokesperson of the Chaos Computer Club, is quoted that together with the documents obtained by the journalists this suggests that timing attacks were indeed successfully committed.
There is also a front page article on Tagesschau.de with largely the same information:
https://www.tagesschau.de/investigativ/panorama/tor-netzwerk-100.html
Later today, further reports are to be expected by Panorama and STRG_F, which should become available here:
https://www.ndr.de/fernsehen/sendungen/panorama/
https://play.funk.net/channel/strgf-11384
-- Florian