The "Matrix" network dismantled: 1.7 tonnes of drugs seized, Romanian leader on Europol's list
DIICOT dismantled the drug trafficking network led by Cristian Măhălean, known as "Matrix", classified by Europol as a High Value Target. A total of 1.7 tonnes of narcotics, estimated at 25 million euros, were seized.
The "Matrix" transnational drug trafficking network dismantled by DIICOT after three years of investigation
Prosecutors from DIICOT dismantled a major drug trafficking network coordinated by Gheorghe Cristian Măhălean, known as "Matrix" — a Romanian citizen whom Europol had classified in December 2025 as a High Value Target (HVT), meaning one of Europe's most wanted criminals. According to Google News RO — Crime (ro), the international investigation, conducted between 2023 and 2026, resulted in the seizure of approximately 1.7 tonnes of narcotics, valued at over 25 million euros at retail prices.
Modified lorries in Maramureș, placed at the disposal of Albanian organised crime networks
The group made available to Albanian organised crime networks a fleet of lorries modified in clandestine workshops in Maramureș county. Under the cover of apparently legal freight transport runs, the suspects moved hundreds of kilograms of cocaine, cannabis and hashish along the Spain–Western Europe route, functioning as a private logistics service provider for major trafficking networks.
Logistics were assured from Romania: Vilhelm Stocsek, known as "Vili", and Ioan Vasile Ionce coordinated the acquisition and modification of vehicles. In a warehouse in the village of Rușor, Maramureș county, Ionce adapted semi-trailers with secret compartments mounted in the floor or in the cabin ceilings, through modifications to air conditioning systems.
Commercial front through transport companies in several counties
To give the appearance of legality, the network relied on a commercial cover consisting of freight transport companies in Satu Mare, Bihor, Mehedinți and Timiș counties — including Trial Expres Transport, GFB Transport, TPM Mar Transport, NKS Boom Trans and Kevin Ideal Trans. With documents in order and under the cover of routine runs, recruited drivers collected drug shipments directly from Spain and delivered them to various European destinations, concealing the narcotics among legally transported goods.
Măhălean coordinated the entire operation from behind the scenes, without appearing in the company or vehicle documents used, according to sources cited by Adevărul. He determined the routes, recruited drivers and provided them with modified vehicles. When transports were intercepted, the group's leadership intervened rapidly, ensuring legal assistance to arrested drivers in order to monitor the progress of criminal cases and prevent information leaks.
Hierarchical structure: four leaders in the command nucleus
The investigation revealed an organisation structured on two distinct levels. At the top of the pyramid was Măhălean, the initiator and coordinator of the entire operation. He was supported by Vilhelm Stocsek, responsible for logistics coordination, and Ioan Vasile Ionce, who ensured the technical modification of vehicles. Gheorghe Pintea, known as "Moșul" or "Bătrânul", completed the command nucleus, according to sources from Adevărul.
The financial and support level included the leader's partner, Valentina Ondina Mănescu, accused of complicity and money laundering. Three other suspects — Alexandru-Ionuț Mihăesc, Tiberiu Marian Bîzu and Mihaly Attila Tolvaj — are being investigated for participation and complicity in drug trafficking.
Four transports intercepted, 1.7 tonnes of drugs seized
The investigation benefited from extensive judicial and police cooperation between 2023 and 2026, with the participation of investigators from France, Spain, Italy and Germany, alongside Eurojust and Europol. Information provided by Romanian authorities enabled foreign authorities to intercept four heavy-tonnage road transports.
As a result of these operations, the following were seized: 114 kilograms of cocaine, 228.2 kilograms of cannabis and 1,376.9 kilograms of hashish (cannabis resin) — a total of approximately 1.7 tonnes of narcotics. The total value of the captured goods is estimated at 9.6 million euros on the wholesale market and exceeds 25 million euros at retail sale. The group operated continuously from September 2023 until August 2026.
Encrypted SKY ECC messages used as evidence in the case
Among the modern means of evidence used in the investigation were conversations conducted by suspects on the encrypted SKY ECC application. This platform had for years been the preferred communication channel of organised crime groups, guaranteeing anonymity through unique user codes.
The vulnerability of the system exposed in 2021 by European authorities triggered a series of operations on a global scale. On 9 March 2021, Belgian police carried out over 200 raids following the decryption of over one billion confidential messages. In parallel, the United States Department of Justice charged the company's executive director with facilitating drug trafficking.
On 19 March 2021, SKY ECC operations ceased definitively after BlackBerry suspended its services, and the website was seized by the FBI. Once the network was broken, the anonymity offered by PINs disappeared, and the vast majority of users were able to be identified. Data decryption generated hundreds of criminal cases and a massive number of convictions, particularly in Western Europe — creating the context in which messages from suspects in the "Matrix" network came to be used as evidence by Romanian investigators.
Source: Google News RO — Crime (ro)