Data Recovery Case File · Portable Drives · Partial Directory Loss
The Structure Survived and the Contents of It Did Not
His enquiry describes a precise and unusual symptom. A 4TB drive that had never given trouble: "yesterday, when opening the disk on my laptop as usual, the disk showed only the folders wit"h nothing inside them. Folders present, contents absent. That is not a drive that has been wiped — it is a directory that has lost part of itself, and which part survived tells you a good deal about what happened and what can come back.
| Media | 4TB external hard drive — folder hierarchy presenting normally with contained files absent; no prior symptoms reported |
| Reported situation | Drive in routine use without previous difficulty · folder structure displaying normally on connection · files within folders not present · change noticed on a single occasion · substantial content held |
| Fault class | Partial directory loss with folder records intact — file entries unreadable; content unwritten over |
| Equipment used | Drive removed from use immediately · reported capacity compared against visible content · imaged write-blocked before any reconstruction · file entries recovered from surviving directory copies on the image · signature carving alongside · files validated by opening |
The decode: why folders and files fail separately
What a folder actually is: a record, exactly like a file's record. The filesystem stores an entry describing a folder — its name, its position in the hierarchy — and separate entries describing each file inside it. They are the same kind of thing stored in the same way, which is why they can be lost independently of one another.
So what he is seeing: the entries describing folders are still readable and the entries describing files are not. That is partial damage to the directory — a portion of it has become unreadable, and the portion that went happened to hold file records while the folder records lived elsewhere. It looks selective and it is simply where the damage fell.
Why that is encouraging rather than alarming: file content was never involved. Directory entries are small and occupy a defined region; the actual data sits across the rest of the 4TB and nothing wrote over it. The files are physically present and currently unnamed, which is among the more recoverable conditions in this archive.
The check that confirms it in seconds: compare the drive's reported used space against what is visible. If capacity is still consumed while folders appear empty, the content is there. A drive that had genuinely lost its files would report itself as largely free.
Why the folder structure surviving is worth more than it appears: it provides the map. A recovery that returns files with no structure gives unnamed items in no order; here the hierarchy is intact and readable, so recovered content can frequently be placed back into the folders it belonged to. What survived is exactly the part that makes the rest usable.
What causes this pattern: most often an interrupted write to the directory region — an unclean disconnection, a crash, or a power interruption while the filesystem was updating. Sometimes the beginning of a physical read problem affecting that specific area, which is why the drive is assessed rather than assumed healthy.
What must not happen: no repair utility and no further use. A consistency check meeting a directory in this state will bring it into agreement with itself by removing the entries it cannot reconcile — which finalises exactly what a rebuild would otherwise recover.
On the bench
The drive was removed from use immediately, a consistency check meeting a partial directory bringing it into agreement by discarding entries it cannot reconcile. Reported capacity was compared against visible content, consumed space with empty folders confirming files present and unnamed. It was imaged write-blocked before any reconstruction, file entries recovered from surviving directory copies on the image — folder and file records being the same kind of structure stored the same way, so damage takes one and leaves the other — with signature carving alongside and files validated by opening.
The outcome
Capacity compared against content first, the drive imaged before any reconstruction and file entries recovered from surviving directory copies. Free assessment, one fixed written figure including VAT; where a drive has to be opened, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: a folder is a record exactly like a file's record, stored the same way — so damage to part of the directory can take file entries and leave folder entries standing. Your content was never involved, and the surviving structure is the map for putting it back.
Drive showing folders with nothing inside them
Check the used space, then stop using the drive. A folder is a record exactly like a file's record, stored the same way in the same directory — which is why damage to part of it can remove file entries while leaving the folders that contained them standing. It looks selective and it's simply where the damage fell. If the drive still reports capacity as consumed while folders appear empty, your files are physically present and merely unnamed, which is a recoverable position; a drive that had genuinely lost them would report itself as largely free. Don't run a consistency check — it brings a damaged directory into agreement with itself by removing the entries it can't reconcile.
Check the used space — then call Guildford Data Recovery on 01483 901310; imaged write-blocked before any reconstruction, file entries recovered from surviving directory copies, files checked by opening.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.