The man's confession came just days after the biggest dump of hacked data in Germany became public. Before media outlets reported on the hack late last week, authorities failed to react to the leaked data, which had trickled out over weeks.
The information - including email addresses, mobile phone numbers and chat transcripts - were leaked via a Twitter account called "G0d" that described itself using the words "security researching," "artist" and "satire & irony".
A German government spokeswoman said Friday that the data published didn't included any sensitive information about Merkel.
Germany has seen a range of intrusions in recent years. Hackers tried to infiltrate computers of think-tanks associated with the governing CDU and SPD parties in 2017. A year earlier, scammers set up a fake server in Latvia to flood German lawmakers with phishing emails.
In 2015, attackers breached the network of the Bundestag and stole 16 gigabytes of data. Security firm Trend Micro Inc. has linked the Bundestag attack and others to Pawn Storm, a group with ties to Russia - whose government has repeatedly denied hacking foreign powers.
There was never any information leaked from the Bundestag breach in which hackers roamed the network for more than a week before they were detected. The Bundestag's entire IT system had to be taken down for several days to fix the problem.
The German Government has since bolstered its technology protections, setting up a cyber-defence unit in 2017 staffed by thousands of soldiers and IT experts to protect military networks and key infrastructure, such as power plants and hospitals.
The data also includes what appears to be chat transcripts from Economy Minister Peter Altmaier as well as more mundane material such as rental-car contracts. The attack affected all major German political parties, with the exception of the populist Alternative for Germany.
- Bloomberg