Peter Williams
Former L3Harris executive; pleaded guilty to stealing US government zero-days and selling them to Operation Zero, sentenced 87 months.
Last refreshed: 17 April 2026 · Appears in 1 active topic
How did a defence contractor executive sell US government cyber weapons to a Russian exploit broker?
Timeline for Peter Williams
Pleaded guilty on 29 October 2025 to stealing eight-plus zero-day exploits from L3Harris Trenchant and selling them to Operation Zero; sentenced to 87 months on 24 February 2026
Cybersecurity: Threats and Defences: OFAC turns IP law on Operation Zero- Who is Peter Williams and what did he steal from L3Harris?
- Peter Williams was a senior executive at Trenchant, L3Harris's cyber unit. Between 2022 and 2025 he stole at least eight zero-day exploits developed for US government use and sold them to Russian exploit broker Operation Zero.Source: DOJ sentencing documents February 2026
- How long was Peter Williams sentenced for stealing US cyber weapons?
- Peter Williams was sentenced to 87 months (7 years, 3 months) on 24 February 2026 after pleading guilty on 29 October 2025.Source: DOJ February 2026
Background
Peter Williams, a 39-year-old Australian national, was a senior executive at Trenchant, the cyber operations unit of US defence contractor L3Harris. Between 2022 and 2025 he stole at least eight zero-day exploits developed exclusively for US government use and sold them to Operation Zero, the Russian exploit brokerage operated by Sergey Zelenyuk. Williams pleaded guilty on 29 October 2025 and was sentenced to 87 months (7 years, 3 months) by a federal court on 24 February 2026.
The conviction established the criminal predicate for the subsequent OFAC sanction against Zelenyuk and Matrix LLC. Williams had access to the exploits in his executive role at Trenchant, a unit that developed offensive cyber tools exclusively under US government contracts. His case is the most significant documented insider-theft of US government cyber capability since the 2017 Reality Winner NSA data case, in terms of the technical value of the materials transferred.
The sentencing at 87 months, above the federal sentencing guideline range, reflects the severity the DOJ attached to the transfer of government cyber capabilities to a Russian-government-aligned broker. The case also anchors the OFAC PAIPA action: the civil sanction targets the broker network that Williams supplied, making the insider prosecution and the Treasury designation two parts of a single enforcement action against the exploit-broker supply chain.