DOJ says Trenchant boss sold exploits to Russian broker capable of accessing ‘millions of computers and devices’

U.S. prosecutors have confirmed that Peter Williams, the former head of Trenchant—a U.S. company specializing in hacking and surveillance technology—illegally sold powerful hacking tools capable of compromising millions of devices worldwide. Williams, a 39-year-old Australian national, pleaded guilty in October to selling eight exploits he misappropriated from his employer, Trenchant, a subsidiary of defense contractor L3Harris, which provides surveillance technology to the U.S. government and its allies. According to the Justice Department, Williams profited over $1.3 million in cryptocurrency from these sales between 2022 and 2025. His activities are said to have significantly endangered the U.S. intelligence community, as he sold these tools to a Russian entity with ties to the government. While it was previously known that Williams sold exploits from Trenchant, the new court documents reveal the potential global implications of his actions, including the facilitation of surveillance, cybercrime, and ransomware attacks. As Williams awaits sentencing on February 24 in a federal court in Washington D.C., prosecutors are advocating for a nine-year prison term, three years of supervised release, and a restitution payment of $35 million. They argue that the exploits he sold could allow unauthorized access to millions of computers and devices, including those in the United States. Following his sentence, Williams is expected to be deported back to Australia. In a letter submitted to the court, Williams expressed remorse for his actions, acknowledging that he violated personal and professional values. He stated, "I made choices that directly violated the values I believed in and the trust placed in me by my family, colleagues, and friends." His defense attorney, John P. Rowley, contended that none of the tools sold were classified and asserted that Williams had no intention of harming the U.S. or Australia, despite the consequences of his actions. Williams was previously under investigation by the FBI during the time he was selling these exploits, which are known as zero-day vulnerabilities—exploits that target software flaws not yet patched by the developers. The case took a turn when FBI agents executed search warrants at Williams' home, uncovering evidence, including cryptocurrency transaction records and communications with the Russian broker, identified as Operation Zero. The broker reportedly offers substantial rewards for hacking tools aimed at Android and iPhone devices, emphasizing its exclusivity to Russian government clients. Prosecutors labeled this broker as one of the most dangerous exploit brokers globally, indicating that Williams knowingly chose to engage with them to maximize his financial gain. This case highlights the ongoing threats posed by insider actions within cybersecurity firms and the potential global impact of such betrayals on national security.