If the user's/operator's guard/entry node was also aspect of the attacking relays, the attacking relays may be able to capture the IP address of the user/operator along with the onion services information and facts that the user/operator was.