French police seized a server running two Tor relays belonging to French activist Aeris. Aeris said the server was confiscated in connection to the WannaCry attacks. The activist said police seized his server because a big French company was infected with the virus two days earlier. The company logged all outgoing traffic during the attacks and provided the data to police. The investigation is led by France s cyber-crime investigation unit OCLCTIC (L’Office Central de Lutte contre la Criminalit..)
Source: https://www.bleepingcomputer.com/news/security/french-police-seize-two-tor-relays-in-wannacry-investigation/