Data Recovery Case File · Portable Drives · It Is Still Happening
Progressive Loss Means There Is Still Something to Save
His enquiry describes a loss with a direction. A 3TB external drive "recently moved when reshuffling the layout of my bedroom — not by myself — and since then files have begun to disappear, and I am also unable to copy the contents to another drive without a fatal device error. It contains several years' worth of photographs and documents." Files vanishing gradually is very different from files lost at once — because it means the cause is ongoing, and every day is another instalment.
| Media | 3TB external hard drive — files progressively becoming absent following relocation; copy operations terminating with device errors; several years of photographs and documents held |
| Reported situation | Drive relocated by a third party during a room reorganisation · files beginning to disappear from listings afterwards · loss continuing progressively · copying to another drive failing with device errors · several years of photographs and documents held |
| Fault class | Progressive read failure affecting directory regions — entries lost as the surfaces holding them degrade; process ongoing |
| Equipment used | Drive removed from use immediately · Atola Insight Forensic error-rate assessment · imaged write-blocked under per-sector timeouts in priority order · directory structures rebuilt from surviving copies on the image · losses mapped per file |
The decode: why files vanish gradually, and what that tells you
Why a file can disappear without being deleted: a folder listing is produced by reading directory entries — small records stating that a file exists, what it is called and where its content begins. Those records live in regions of the drive like anything else. When the region holding a particular entry becomes unreadable, that file stops appearing, while its content sits untouched somewhere else entirely.
So what the pattern means: the surface holding his directory information is degrading, and it is doing so a piece at a time. Each time another region fails, another set of entries goes with it. The files are not being removed; the record of them is being lost.
Why "progressive" is the important word, and the reason for urgency: a loss that happened at one moment is finished, and whatever survived it will still be there next week. A loss that is happening a bit at a time is not finished. Every entry still visible today is one that could be gone by the time anybody gets round to it. This is the rare case where the amount recoverable is genuinely falling while the enquiry is being considered.
Why the copy fails with a device error: the same regions failing during a listing fail during a transfer, and a copy operation meeting an unreadable area reports a hardware error and stops. It is the same fault seen under heavier load — which is why bulk copying is the operation that exposes it most brutally.
Why the move is relevant even though nothing dramatic happened: the drive was handled by somebody else during a room reorganisation, so any knock went unwitnessed. A drive does not have to be dropped from height to be damaged — a firm set-down onto a hard surface while it is powered is enough, and nobody would remember doing it.
What must stop today: using it, browsing it, and attempting further copies. Each of those is sustained reading of a degrading surface, and the regions being read include the ones that are failing. Every attempt to save something risks another set of entries.
Why the outlook is reasonable if acted on: file content is spread across the whole drive and directory information occupies a small part of it, so the great majority of the data is untouched. Imaging under strict timeouts captures the healthy expanse quickly and rebuilds the directories from surviving copies — which returns files with folders and names rather than as unnamed output.
On the bench
The drive was removed from use immediately — a progressive loss meaning the process is ongoing, so browsing and copying attempts read exactly the regions that are failing and cost further entries each time. The Atola Insight Forensic assessed error rates, and imaging ran write-blocked under per-sector timeouts in priority order against the possibility of further degradation mid-capture. Directory structures were rebuilt from their surviving copies on the image, and losses resolved to individual files.
The outcome
The drive taken out of use, error rates measured and the contents imaged in priority order with directories rebuilt from their surviving copies. Free assessment, one fixed written figure including VAT; where a drive has to be opened, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: files disappear without being deleted when the regions holding their directory entries become unreadable — the record goes and the content stays. And because it is happening gradually rather than all at once, the process is still running, so what is visible today may not be next week.
Drive losing files a few at a time
Stop using it today — this is the rare situation where what's recoverable is genuinely falling while you decide. Files disappear without being deleted when the regions holding their directory entries become unreadable: a listing is produced by reading small records stating that a file exists and where its content begins, and when the area holding a record fails, that file stops appearing while its content sits untouched elsewhere. Because it's happening progressively rather than all at once, the cause is ongoing, so every entry visible today could be gone next week. And browsing or copying reads exactly the failing regions, so each attempt to save something risks another set.
Stop using it now — call Guildford Data Recovery on 01483 901310; error rates measured, imaged under per-sector timeouts in priority order, directories rebuilt from their surviving copies.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.