Maybe he has handlers, or maybe beneficiaries that pay him, or maybe it's blackmail. It's hard to know. Especially since things like that would be handled by intelligence agencies whose job it is to make those things hard to know. I'm making my assumption based on his behavior. He has seemingly targeted western countries and ignored authoritarians. The dead giveaway to me is he seemed to be coordinating his "data dumps" during the 2016 election with Russian influence operations.