Former defence manager admits trade secret theft for Russian broker

What happened

Peter Williams, a former general manager at a US defence contractor, pleaded guilty in US federal court on 29 October 2025 to stealing trade secrets and selling them to a Russian cyber-tools broker, the US Department of Justice said.

Williams, a 39-year-old Australian national, admitted two counts of theft of trade secrets. The department’s announcement is the source of this report.

According to facts admitted as part of his plea, Williams misused his access to his employer’s secure network between approximately 2022 and 2025. He took at least eight protected cyber-exploit components from software developed for national security purposes.

The components were intended for sale only to the US government and selected allies. The broker that bought them publicly promoted itself as a reseller of cyber exploits to customers including the Russian government, the department said.

Williams signed several written contracts with the broker in return for the promise of millions of dollars in cryptocurrency. The arrangements covered both the initial sale of the components and further periodic payments for support.

He transferred the stolen material through encrypted channels and used proceeds to buy expensive items, according to his admissions. The announcement did not specify the total amount he received or identify the purchases.

The background

Cyber exploits are software tools or code that take advantage of weaknesses in computer systems. Their significance in this case lies in the restricted market for which they were developed: government customers approved to receive sensitive capabilities, rather than a wider commercial audience.

The Justice Department did not name Williams’s employer or the Russian broker. It also did not identify the vulnerabilities targeted by the stolen components, the systems they could affect or the means by which the theft was discovered.

The admitted conduct involved misuse of an employee’s existing access, rather than a reported external break-in. That distinction is central to insider risk: a secure network can still lose information when someone permitted to use it acts outside their authority.

The contracts also show that the arrangement went beyond handing over files. Payments for continuing support were part of the deal, although the department did not describe what assistance Williams subsequently provided.

Other trade-secret cases reported by Insider Threat Roundup have involved employees taking technical knowledge for outside commercial purposes. In the conviction of a fibre laser specialist for economic espionage, the Justice Department said Ji Wang stole Corning research files to support a planned business in China.

A separate case involving alleged theft of Google AI trade secrets concerned accusations that an engineer copied confidential files while pursuing business interests with two China-based technology companies. That report concerned allegations, unlike Williams’s guilty plea. The cases illustrate different ways specialist employees’ access can intersect with outside financial interests; they do not establish how common such conduct is.

What people are saying

US Attorney Jeanine Ferris Pirro said Williams’s conduct caused more than $35 million in losses to a company in the District of Columbia. She also said foreign cyber actors from countries not allied with the US obtained sophisticated exploits that were likely used against victims. Her statement did not identify particular attacks or victims.

Assistant Attorney General for National Security John A. Eisenberg described Williams’s actions as a deliberate abuse of trust for personal gain. He said the plea demonstrated the department’s intention to hold insiders accountable when they misuse their positions.

Roman Rozhavsky, assistant director of the FBI’s Counterintelligence Division, said the sale gave Russian cyber actors an advantage in operations targeting US citizens and businesses. He described the employer as a defence contractor cleared to handle classified work.

Attorney General Pamela Bondi framed the prosecution as a national security matter, citing the danger cybercrime poses to the public.

What happens next

Each of the two charges carries a maximum prison term of 10 years. Each also carries a potential fine of up to $250,000 or twice the financial gain or loss arising from the offence, the Justice Department said. These are statutory limits, not a sentence already imposed.

The announcement did not give a sentencing date or set out a proposed sentence. It also did not announce charges against the broker.

The FBI’s Baltimore Field Office investigated the case. Prosecutors from the US Attorney’s Office for the District of Columbia and the Justice Department’s National Security Division are handling it, with specialists from its cyber, counterintelligence and export-control sections.