Data Recovery Case File · Second Fixes & Trade Handoffs · Ask What They Ran
The Shop Did the Most Important Thing Without Being Asked
Her enquiry contains a piece of good fortune worth naming. A laptop repaired after a failure: "they have replaced the hard drive and I have the original, but they were not able to retrieve any of the information from it when they made" the swap. The recovery attempt did not work. But she is holding the drive — and a great many shops keep old drives, dispose of them, or return the machine without mentioning them, which ends cases before anybody knows they existed.
| Media | Original solid-state drive removed during a laptop repair and returned to the owner — retrieval attempted by the repair provider without result |
| Reported situation | Laptop failing and taken for repair · drive replaced by the provider · original drive returned to the owner · provider attempting retrieval without success · machine now functioning with new storage · original contents required |
| Fault class | Device-level failure with the original medium preserved and in the owner's possession — prior write activity to be established |
| Equipment used | Previous provider's methods and any write activity established before assessment · drive assessed on a direct connection with initialisation state read directly · vendor technological and safe modes attempted · imaged write-blocked on restored addressing |
The decode: what she has, and the questions worth asking
Why possession is the decisive fact: the drive is the only place her files exist. Everything else — the shop's opinion, the failed attempt, the new drive in the machine — is commentary. A returned drive is a case that is still open, and it is worth saying plainly that this does not always happen. Drives are kept for parts, wiped for reuse, or sent for disposal, and the owner is frequently never told.
Why a drive swap is unlikely to have harmed it: replacing a drive means fitting a new one and installing a system on that. The old drive is disconnected and set aside. Nothing in the ordinary course of that work writes to it, which is why the returned drive is very likely in the condition it was in when the machine failed.
What "not able to retrieve" almost certainly means: that they connected it and ran consumer recovery software, which returned nothing. That is the method available to a general repair provider, and where a drive will not present itself properly there is nothing for such software to read. The result says the tool was unequal to the situation rather than that the data is gone — a distinction nobody in that conversation would have drawn, because from inside the trade it does not feel like one.
The two questions worth putting to them: what was the drive connected to and what was run against it, and was anything written. The second matters most. A shop trying to make a drive work may attempt a repair, a rebuild of the boot configuration, or an initialisation — and any of those changes the position materially. They will normally answer straightforwardly.
What the fault probably is: a drive that cannot be recovered by software and could not run the machine has generally failed to complete its own initialisation, reading internal structures on power-up before it can announce itself. That is below anything software reaches.
Why that has a route: manufacturers build technological and safe modes into their controllers for exactly this, allowing the firmware area to be assessed, damaged modules repaired and addressing restored — reviving the controller rather than bypassing it, since on this class of device the mapping and often the encryption live there.
What to do with it meanwhile: leave it disconnected. Nothing further should be run against it, including by anybody trying to help.
On the bench
The previous provider's methods and any write activity were established before assessment — a drive replacement not ordinarily writing to the original, so the drive is likely in the condition it reached when the machine failed, unless a repair, boot rebuild or initialisation was attempted. The drive was assessed on a direct connection with initialisation state read directly, its resistance to consumer software indicating failure below anything such tools reach. Vendor technological and safe modes were attempted, and imaging performed write-blocked on restored addressing.
The outcome
The prior handling established, the drive assessed on a direct connection and imaged on restored addressing. Free assessment, one fixed written figure including VAT; where a chip has to be removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: having the original drive is most of this. Replacing a drive means fitting a new one and installing to that, so nothing in the ordinary course writes to the old one — it is very likely as it was. And "couldn't retrieve" from a general shop means their software found nothing, which is expected on a drive that will not present itself.
Repair that replaced your drive and returned the original
Keep that drive disconnected and don't let anyone else run anything on it — you're holding the only place your files exist, and not every shop returns them. Ask two questions before anything else: what was it connected to and what was run against it, and was anything written to it. The second matters most, because a shop trying to make a drive work might attempt a repair, rebuild the boot configuration, or initialise it, and any of those changes what's possible. The encouraging part is that a straightforward drive swap doesn't write to the old one — they fit the new drive and install to that — so yours is very likely in exactly the condition it reached when the machine failed.
Keep it disconnected — call Guildford Data Recovery on 01483 901310; previous methods and write activity established first, initialisation state read directly, vendor technological modes attempted.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.