SSL terminates at the cloudflare proxy.. virtually all bitcoin exchanges are behind cloudflare.. that means whenever you withdraw to a bitcoin address  from any bitcoin exchange, that transaction is potentially being logged at cloudflare. I'd guess that this may have been the primary reason for DDOSing the exchanges in the first place (to make them go behind cloudflare).

Your IP, Name, Email and bank account details (and ID scans, if you uploaded them to get verified) are all potentially associated with your bitcoin addresses because of this. Whenever you log into any bitcoin service behind cloudflare, they can potentially see and log everything you do.

Blockchain.info is also behind cloudflare so the 'send-shared' mixer should also be considered pwnd.

Cloudflare would never do that right? Imo, they probably already have.