Ex-Trenchant boss sold exploits to Russian broker for $1.3 million

Peter Williams, the 39-year-old former general manager of Trenchant—a division of the U.S. defense contractor L3Harris—has pleaded guilty to selling eight hacking tools stolen from his employer. According to the Justice Department, Williams admitted to making more than $1.3 million in cryptocurrency from the sales. Williams, an Australian national, pleaded guilty in October.

Federal prosecutors asserted that Williams stole and sold technology that can hack millions of computers and people worldwide. The Justice Department stated that the exploits sold by Williams would have allowed the purchaser to potentially access millions of computers and devices worldwide, including in the United States. Prosecutors said these eight tools could have been used to enable government surveillance, cybercrime, and ransomware worldwide, and that Williams’ actions directly harmed the U.S. intelligence community. The buyer was a Russian broker, identified by sources as likely Operation Zero, a Russian exploit broker that offers up to $20 million for mobile hacking tools. Prosecutors characterized the unnamed buyer as one of the world’s most nefarious exploit brokers.

The theft occurred while Williams was actively overseeing Trenchant’s internal investigation into the missing technology. During this time, Williams continued to sell the company’s secrets and exploits—technically known as zero-days, or software flaws that the maker has not yet had time to fix—even after learning of an FBI investigation. According to prosecutors, Williams stood by while another employee was blamed for his conduct, looking on as an internal corporate investigation falsely cast blame on his subordinate. In a letter to the judge, Williams, the former Trenchant general manager, wrote: “I made choices that directly violated the values I believed in and the trust placed in me by my family, colleagues, and friends” Williams’ lawyer, John P. Rowley, stated there was no evidence that Williams knew the tools would end up in the hands of the Russian government.

The case is heading toward an anticipated sentencing on February 24 in a Washington, D.C., federal court. The FBI had previously obtained and executed search warrants on August 6, confronting Williams with cryptocurrency transaction records. The Justice Department is now requesting a prison sentence of nine years, followed by three years of supervised release. Prosecutors are also seeking a maximum fine of $250,000 and mandatory restitution of $35 million.

Why it matters

This case highlights insider threat risks within the offensive cybersecurity industry, where exploits can be monetized by rogue actors, potentially compromising security infrastructure.