Adaptive Anonymity via $b$-Matching