Ex-L3Harris Exec Sold U.S. Cyber Secrets to Russia, Pleads Guilty

Former L3Harris executive Peter Williams admitted selling U.S. cyber tools to a Russian broker, endangering national security.

Peter Williams, an Australian national and former general manager at L3Harris Trenchant — a cyber-capabilities division of U.S. defense contractor L3Harris Technologies — has pleaded guilty to stealing and selling classified cybersecurity technology to a Russian vulnerability broker.

The Department of Justice (DOJ) announced that Williams’ actions, which occurred between 2022 and 2025, resulted in substantial national security risks and financial losses exceeding $35 million..

L3Harris Trenchant is a specialized cybersecurity unit that develops offensive and defensive cyber tools for members of the Five Eyes intelligence alliance: the United States, United Kingdom, Canada, Australia, and New Zealand.

These tools include zero-day vulnerabilities and other classified software exploits intended solely for governmental use.

According to the DOJ, Williams leveraged his executive access at Trenchant to steal at least eight highly sensitive exploit components.

These exploits — software designed to take advantage of unknown security vulnerabilities — were later sold to a Russian cyber-tools broker for approximately $1.3 million in cryptocurrency.

The DOJ did not name the broker involved in the transaction, but industry observers suspect the buyer was Operation Zero, a Russia-based platform known for purchasing and reselling zero-day exploits to clients, including the Russian government.

Prosecutors revealed that Williams signed multiple contracts with the Russian broker, outlining both initial payments and ongoing fees for continued technical support of the stolen tools.

Williams’ role at Trenchant granted him access to sensitive systems containing proprietary exploit code.

Investigators allege he extracted the materials over three years by exploiting his secure network privileges. His actions ultimately exposed classified US cyber capabilities to foreign adversaries.

US Attorney Jeanine Pirro described the broker as part of “the wave of international arms dealers,” emphasizing the broader implications of the case.

She added that Williams’ betrayal endangered national security and caused significant financial damage to his employer.

Assistant Attorney General for National Security John A. Eisenberg echoed this sentiment, stating that Williams’ conduct “imperiled our national security for the sake of personal gain.”

L3Harris declined to on the case when contacted by reporters .

However, the company previously launched an internal investigation into potential leaks of its cyber tools, following reports from former Trenchant employees that sensitive code had been compromised.

FBI Assistant Director for Counterintelligence Roman Rozhavsky condemned Williams’ actions, noting that by selling these tools, Williams provided Russian cyber actors with an “advantage in their massive campaign to victimize U.S. citizens and businesses.”

The case underscores persistent concerns over insider threats within the cybersecurity and defense industries.

Given the sensitive nature of exploit research, companies like Trenchant rely heavily on internal trust and rigorous access controls.

The breach highlights how a single insider with privileged access can compromise vast amounts of classified information.

Williams’ case has reignited debate the ethics and security of zero-day markets — where vulnerabilities in widely used systems are bought and sold, often to the highest bidder.

While Western defense contractors typically restrict such tools to allied governments, unregulated exploit markets, such as those suspected of involvement in this case, blur the line between research and cyber warfare.

Williams, 39, who previously worked at the Australian Signals Directorate, was arrested in Washington, D.C., and currently remains under house arrest pending sentencing in January 2026.

He pleaded guilty to two counts of theft of trade secrets, each carrying a potential sentence of up to 10 years in prison and fines of $250,000 or twice the illicit gain.

The conviction of Peter Williams marks one of the most serious insider espionage cases involving cybersecurity technology in recent years.

His actions not only violated U.S. export and national security laws but also exposed the vulnerabilities inherent in managing advanced cyber capabilities across international partnerships.

As governments and corporations continue to navigate the tension between innovation and security, the Williams case serves as a cautionary tale the human risks that accompany technological power.

Ken Underhill is an award-winning cybersecurity professional, bestselling author, and seasoned IT professional. He holds a graduate degree in cybersecurity and information assurance from Western Governors University and brings years of hands-on experience to the field.

Hackers hijack real-world cargo, stealing shipments like coffee through cyberattacks.

Prompt injection allowed attackers to make Claude exfiltrate user data.

Check Point finds Windows GDI bugs enabling RCE and data leaks. Learn how Microsoft patched and how to protect your systems.

Microsoft patches WSUS RCE flaw letting attackers gain SYSTEM access. Learn how to secure servers and prevent exploitation.