Super-hacker 'Guccifer' held and named as Marcel Lazar Lehel
It didn't take long to find him once he hacked into the email of Romania's spy chief, George Maior

‘GUCCIFER’, the anonymous hacker who became a thorn in the side of the US establishment by leaking politicians' and Hollywood stars' sensitive private emails, is anonymous no longer. He has been arrested by Romanian police and named as Marcel Lazar Lehel.
Lehel is a 42-year-old Romanian who worked as a cab driver before turning to cyber-crime. The mistake that got him caught was to hack into the email of his country's spy chief, George Maior.
As soon as it came out that Maior had been targeted, the Romanian Intelligence Service (SRI) said earlier this month that they were confident the hacker would be hunted down and caught.
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
Yesterday, they were as good as their word – suggesting to cyber-cynics that the SRI had a pretty good idea all along who the culprit was, not least because Lehel has been convicted before for similar behaviour.
Today he is accused of leaking his victims’ private correspondence in an effort to ruin their public image. A police statement says Lehel “accessed, repeatedly and without authorisation… email accounts belonging to public figures from Romania, with the purpose of gaining possession of confidential information found in their electronic mailboxes”.
Maior wasn't the only high-profile Romanian Lehel went after: the other was the MEP Corina Cretu whose email account, hacked by Guccifer last summer, revealed a hugely embarrassing correspondence between her and Colin Powell, the former US Secretary of State.
Cretu sent Powell photos of herself, including one in a hot tub and another in a bikini, along with suggestive notes. In one, dated November 2011, she wrote: “I have loved you too much, too many years. YOU were my greatest love of my life...”
A free daily email with the biggest news stories of the day – and the best features from TheWeek.com
Powell, a married man, was forced to admit that he had exchanged "very personal" emails with Cretu, whom he had met ten years previously when she was a young diplomat working for the Romanian president. But he insisted her “love” for him was not reciprocated and they had never had an affair.
The Romanian connection is only the tip of the iceberg. Posing as Guccifer, Lehel targeted Sex and the City author Candace Bushnell and comic actor Steve Martin among many prominent Americans.
He also broke into the email account of George W Bush's daughter, Dorothy, finding paintings made by the ex-president, not to mention an awkward note from 'Dubya' in which he wrote that he was "thinking about [the] eulogy" for his father, who was unwell at the time, but is still with us.
The latest Guccifer escapade to come to light involved Downton Abbey creator Julian Fellowes. As Charles Laurence reported for The Week earlier this month, the hacker was able to get into Fellowes’s BT internet account and find the script to the series finale six months before it was broadcast – but had the decency to keep it to himself rather than spoil the suspense for Downton fans.
Softpedia reports that two years ago Lehel was sentenced to three years of supervised release for similar crimes. This time, he can expect a tougher sentence. It seems unlikely he’ll be among the Romanians seeking jobs in Britain now that visa controls are lifted – even if his skills, redirected, are just what many UK companies are looking for.
-
Kim Ju Ae: North Korea’s next leader?
The Explainer Kim Jong Un’s young daughter is being seen as his ‘recognised heir’ following a high-profile public appearance at China summit
-
Is the UK government getting too close to Big Tech?
Today’s Big Question US-UK tech pact, supported by Nvidia and OpenAI, is part of Silicon Valley drive to ‘lock in’ American AI with US allies
-
Russia’s war games and the threat to Nato
In depth Incursion into Poland and Zapad 2025 exercises seen as a test for Europe
-
China is silently expanding its influence in American cities
Under the Radar New York City and San Francisco, among others, have reportedly been targeted
-
How China uses 'dark fleets' to circumvent trade sanctions
The Explainer The fleets are used to smuggle goods like oil and fish
-
One year after mass protests, why are Kenyans taking to the streets again?
today's big question More than 60 protesters died during demonstrations in 2024
-
North Korea's army of fake IT workers
The Explainer Using AI and stolen information to craft false identities, they are becoming an 'increasing menace' to top tech companies in the US and UK
-
Pro-EU centrist beats Trump acolyte in Romania vote
speed read The mayor of Bucharest, Nicusor Dan, defeated hard-right nationalist George Simion in the race for Romania's presidency
-
What happens if tensions between India and Pakistan boil over?
TODAY'S BIG QUESTION As the two nuclear-armed neighbors rattle their sabers in the wake of a terrorist attack on the contested Kashmir region, experts worry that the worst might be yet to come
-
Why Russia removed the Taliban's terrorist designation
The Explainer Russia had designated the Taliban as a terrorist group over 20 years ago
-
Inside the Israel-Turkey geopolitical dance across Syria
THE EXPLAINER As Syria struggles in the wake of the Assad regime's collapse, its neighbors are carefully coordinating to avoid potential military confrontations