The U.S. Department of Justice has confirmed that Peter Williams, the former head of Trenchant, a cybersecurity firm, engaged in the illicit sale of hacking tools capable of compromising millions of devices globally.
In a guilty plea made in October, the Australian national, aged 39, acknowledged selling eight hacking tools he had misappropriated from Trenchant, a subsidiary of defense contractor L3Harris. This company is known for providing surveillance technologies to the U.S. government and its allies. The Justice Department revealed that Williams profited over $1.3 million in cryptocurrency from these transactions between 2022 and 2025.
A court document released recently outlines that Williams' actions significantly jeopardized U.S. intelligence operations by selling these tools to a Russian entity that serves the Russian government.
While it was previously known that Williams sold Trenchant's exploits--software designed to exploit vulnerabilities in other applications to gain unauthorized access--prosecutors have now clarified that these tools could facilitate widespread government surveillance, cybercrime, and ransomware incidents worldwide.
With Williams' sentencing scheduled for February 24 in Washington D.C., the Justice Department is advocating for a nine-year prison term, three years of supervised release, and a restitution of $35 million, along with a maximum fine of $250,000. Following his sentence, Williams is expected to be deported back to Australia.
In a letter to the judge, Williams expressed remorse for his actions, stating, "I made choices that directly violated the values I believed in and the trust placed in me by my family, colleagues, and friends." He acknowledged neglecting his responsibilities and failing to seek guidance during his misconduct.
Williams' attorney argued that the tools sold were not classified, and there is no evidence suggesting that Williams intended for them to reach foreign governments. He emphasized that Williams did not aim to harm the U.S. or Australia, despite acknowledging the unintended consequences of his actions.
In mid-2025, sources revealed that a Trenchant employee had been wrongfully terminated after being accused of leaking sensitive information. However, by October, Williams was formally charged with the theft and sale of hacking tools to a Russian broker in exchange for cryptocurrency.
Evidence indicates that Williams continued to sell these exploits even while under investigation by the FBI, showcasing a blatant disregard for the law. The FBI later confronted him with concrete evidence linking him to the sales.
The Russian broker involved is believed to be Operation Zero, known for offering substantial sums for hacking tools targeting mobile devices. Prosecutors labeled this broker as one of the most notorious exploit brokers globally, noting that Williams chose to engage with them due to their high payouts.
Williams' insatiable desire for wealth and a lavish lifestyle led him to betray his company, colleagues, and the security of the U.S. and its allies, according to prosecutors.