Call us — 01483 901310
Mon–Fri · 9am–5:30pm · No fix, no fee
Start a free diagnostic →
Resources · Recovery Guides

Data recovery guides.

Follow simple, device specific guidelines for what to do and what to avoid right now when a drive fails.

Written by our engineers
since 2002 in Guildford
HDD, SSD, RAID & more
// the golden rule

In doubt? Cut the power.

After a failure occurs, more data gets damaged than during the initial failure due to users continuing to operate the device normally. The best option available to you is to stop usage immediately.

Power off
at the first odd noise
Don't
run software on a dying drive
Never
open the drive yourself
Label
RAID / NAS disks in order
// first five minutes

Your drive just failed? Begin here.

Regardless of the type of drive you have, there are the same five actions that protect your data and your chances for complete recovery. Go through these actions prior to attempting anything else.

01

Stop using it

Every time you save files, take photos, or open applications, those operations can over-write data that may still be recoverable. Put the device away.

02

Power it down

In the event your drive begins to click, beep or refuses to spin, shut off all power immediately. With every new startup of a failing drive, you increase the possibility of creating permanent damage.

03

Don't run software

Using recovery or ‘repair’ software on a physically failing drive simply keeps the drive operational but continues to pound weakened parts. This often turns a previously recoverable drive into a write-off.

04

Leave it sealed, skip the DIY

Don’t freeze the drive; don’t crack it open and replace the circuit board; these and other such myths actually create damage to the device, which is often permanent.

05

Get a free diagnostic

Bring the drive in, or post it in and make sure it’s fully insured. Before any chargeable work is done, we will tell you specifically what can be recovered and at what price.

// jump to a guide

Guides, device by device.

Choose the type of device you’re working with to view common symptoms, the dos and don’ts associated with that device, and our method of recovering that type of media.

// hard-drive recovery

Recovering a hard drive.

Spinning hard drives can fail in two different manners: logical failure (data deleted/formatted/corrupted); physical failure (failed heads/dead electronics/seized motor). A logical failure leaves the mechanics working and typically allows for safer recovery while a physical failure requires bench work and improper handling could result in irreparable loss. Half the job is telling the two apart.

!Warning signs
  • A SMART warning at boot
  • Long freezes and painful slowness opening files
  • It vanishes from the BIOS, or drops out mid-use
  • It won't spin up, or spins a moment then halts
  • A grinding, beeping or clicking noise on start-up
✓Do this
  • Keep it cool, still and unplugged until it's looked at
  • Note down what happened — a drop, a power cut, or it just died
  • Stop the moment you hear anything odd
  • While it still reads, copy your most important files off first
✕Avoid this
  • The freezer trick, or knocking the drive
  • Opening the casing or swapping the board yourself
  • Running repair or recovery software across a failing disk
  • Repeatedly power-cycling a clicking or dead-spun drive

In-house we image fragile drives sector by sector to rebuild broken file systems. We also fit heads and parts from donor drives with matching specifications.

More on hard drive recovery →
// ssd & nvme recovery

Recovering an SSD or NVMe.

Unlike hard disk drives, solid state disks have no moving components therefore there are no clicks or grinding noises; they simply fail, typically suddenly and without warning. Common causes include firmware failures, controller crashes and ‘sudden death’. There are two significant differences between SSDs and traditional hard disk drives: TRIM, which erases files for good within minutes of deletion, and how charge fades over time when the SSD is powered off.

!Warning signs
  • It failed during a firmware update, or just after
  • It goes read-only, or crawls then drops off entirely
  • It reports the wrong capacity, or reads 0 bytes
  • It vanishes from the BIOS, often overnight
✓Do this
  • If an SSD sits unused long-term, power it up occasionally
  • After an accidental delete, shut down fast — TRIM acts in minutes
  • Write nothing more to the drive from this point
✕Avoid this
  • Assuming a deleted file is still recoverable on an SSD
  • Running secure-erase, repair or optimisation tools
  • Keeping the PC running after a delete (TRIM)
The TRIM catch: on most SSDs, deleting a file initiates cleaning of those flash cells within minutes regardless of system shutdown status. Write nothing else to the device. If the deleted file was valuable, immediately power down.

While working in technical mode, our experienced engineers can directly access NAND flash memory, rebuild translator tables and work at controller level to recover failed SSDs.

More on SSD & NVMe recovery →
// external drive recovery

Recovering an external drive.

Remove the casing of an external drive and it is just another hard drive or SSD, so all of the above faults apply, plus two others: the small USB-to-SATA bridge that connects it, and the hardware encryption many enclosures add themselves. That encryption is the reason that removing the drive and reading the raw data tends to produce nothing but scrambled data.

!Warning signs
  • The light comes on but nothing mounts
  • After a knock or fall it clicks, or stops mounting
  • Windows or macOS prompts you to format it
  • No computer, cable or port will show it
✓Do this
  • Start with a fresh cable and a different port — it rules out the obvious
  • If it's taken a knock or is clicking, stop and post it in
  • Keep in mind a lot of enclosures encrypt at the bridge
✕Avoid this
  • Formatting it when prompted
  • "Shucking" an encrypted drive to read it raw — you'll get only ciphertext
  • Repeatedly re-plugging a dropped or clicking drive

Our in-house technicians can bypass dead interface boards, remove encryption applied to bridge-encrypted volumes and perform mechanical repairs such as head and motor replacements on dropped units.

More on external drive recovery →
// usb stick recovery

Recovering a USB stick.

A typical USB stick consists of flash memory and a microcontroller in a single package. When these devices fail it is normally due to faulty microcontrollers or broken connectors rather than loss of memory containing user data. However, the microcontroller scrambles the contents of user data, making recovery specialist work and beyond what is possible via general-purpose repair utilities.

!Warning signs
  • It connects, then randomly drops out
  • The connector is snapped, loose or bent
  • It won't open until you format it
  • Nothing shows, and no light comes on at all
✓Do this
  • Note what was stored on it
  • If the connector snapped, keep both pieces
  • Set it aside the instant anything seems wrong
✕Avoid this
  • Trusting a "USB repair" tool that writes back to it
  • Reformatting it
  • Jiggling or forcing a loose connector, which fractures the board

To restore your files, we access the raw memory chips either by physically removing them from the stick (known as chip-off), or accessing the individual testing pads within a single memory module (monolithic). Once we have accessed the raw flash, we build back up your files.

More on USB stick recovery →
// memory card recovery

Recovering an SD or memory card.

Two incidents most commonly corrupt a memory card: the card was pulled during the write process (either because you removed it from the camera, or the camera died), or the card was accidentally formatted in the camera. Both incidents typically destroy the metadata that points to where your images reside. However, the photos and videos themselves almost always survive. Therefore, the focus is to avoid overwriting them before they can be recovered.

!Warning signs
  • It's stuck write-protected or read-only
  • A computer won't mount it
  • Files read as 0 bytes, or the card looks empty
  • The camera reports a card error, or asks you to format it
✓Do this
  • Flip the lock switch to read-only to protect it
  • If it was formatted by accident, don't reuse the card
  • Stop taking photos at once — each new one may overwrite a lost shot
✕Avoid this
  • Allowing the camera to “repair” or rebuild it
  • Accepting the camera’s format prompt
  • Continuing to shoot on the card

We make an image of your memory card. Using that image, we extract your photos and videos based upon their unique identifiers (file signature). Then we rebuild your original directory structure across memory cards (XQD, CF, microSD, SD).

More on memory card recovery →
// mac & macbook recovery

Recovering a Mac or MacBook.

Modern Mac computers present two significant challenges: APFS (Apple’s file system) can become corrupted after a failed update; and the T2 or Apple Silicon security chip encrypts your computer’s storage, which is soldered into the logic board on recent Mac models. When combined, these create an environment where the files on your computer are only accessible as files while the logic board is working, and only if you possess the key.

!Warning signs
  • It sits demanding your FileVault password or key
  • Liquid has been spilt on it
  • It won't start after a macOS update
  • A question-mark folder flashes as it boots
✓Do this
  • Record which macOS version it was, and what went wrong
  • Set a liquid-hit Mac aside immediately
  • Store your FileVault recovery key safely — without it, no one can unlock encrypted data
✕Avoid this
  • Presuming the soldered SSD survived just because the rest of the Mac didn’t
  • Reinstalling macOS over your data
  • Leaving a liquid-hit board powered — corrosion keeps spreading

If you have a Mac equipped with a removable drive or Fusion drive, we can repair damaged APFS container structures, and open encrypted FileVault volumes provided that you provide us with your encryption key. As for Macs that have had their storage soldered to the logic board (T2/Apple Silicon models), these are projects that we are unable to take on.

More on Mac & MacBook recovery →
// laptop & pc recovery

Recovering a laptop or PC.

If your Windows laptop or desktop PC won’t start up, there is probably no harm to your files. The question is whether this is due to a failure of the drive itself or simply a fault of your OS, and each needs to be treated separately. Mistaking a dying drive for a software problem results in loss of potentially recoverable data.

!Warning signs
  • A clicking hard drive, or an SSD that's dropped off the system
  • A SMART alert on startup
  • Constant freezing that ends in no boot at all
  • No boot, or a blue screen before Windows loads
✓Do this
  • Determine whether it's a hard drive or SSD — that changes everything
  • On a SMART warning, back up now and swap the drive out
  • If the fault is the OS, your files are safe — have the drive imaged
✕Avoid this
  • Rebooting a drive that has begun clicking
  • Reinstalling Windows before your data is recovered
  • Pointing chkdsk or repair utilities at a drive that’s physically failing

We will image your drive(s) and retrieve files from failing disk drives, regardless of brand (Lenovo, HP, Dell etc.), and failing solid-state drives (SSDs).

More on laptop & PC recovery →
// raid & nas recovery

Recovering a RAID or NAS.

As RAID systems and NAS devices allow you to lose one hard drive and still continue to run, redundancy is exactly what they offer. However, a redundant system is not a back-up. Once a second hard drive has failed or when a rebuild or re-initialise process is started onto a hard drive that is also failing, things begin to get serious. The most terrible thing you can do is to rebuild or re-initialise a system onto a failing hard drive as you may overwrite the information that you are attempting to recover.

!Warning signs
  • Two or more disks have failed
  • A rebuild has failed, or the controller has died
  • A Synology or QNAP reports 'volume crashed'
  • The array shows as degraded, or has gone offline
✓Do this
  • Halt everything — no rebuild, no re-initialising
  • Pull each disk and mark its slot position (1, 2, 3 and on)
  • Send them all in, the failed ones included
✕Avoid this
  • Forcing the volume online, or shuffling disk order
  • Factory-resetting the NAS unit
  • Rebuilding onto a weak or already-dying disk
What to send: the bare hard drives only, not the enclosure or controller. Pull them yourself and label each with its slot number, as we use these numbers to rebuild the array correctly. Information on the usual Synology and QNAP boxes can be found on our NAS recovery page.

Each hard disk is copied read-only. Then, in software, we rebuild the stripe, parity and disk order and repair the file system regardless of who made the device.

More on RAID recovery →
// before it happens

Best practice: protect your data.

The least expensive recovery is the one you don’t ever need. Following a few simple procedures can help protect your data long before anything goes bad.

01

Follow the 3-2-1 rule

Always create three copies of everything that is irreplaceable. Use two different types of media for backups. Also, always keep one copy of your backups off site or in the cloud. Do not even think of using one lone hard drive as your “backup”.

02

Test your backups

A backup that you have never verified doesn’t count as a backup. It’s just a hope. Every once in a while, verify that some files open from it.

03

Act on early warnings

Constantly hearing unusual noises, having the system freeze constantly, files that won’t open and getting error messages saying that SMART has detected problems with your disk(s) indicate that something is going wrong with one of your disks. Immediately back it up and replace it before it completely fails.

04

Mind your SSDs

Since TRIM wipes deleted files after only minutes, if you happen to delete an important file on your solid-state disk (SSD), take action right away. Never rely solely on a solid state disk as your only copy because they tend to lose charge over extended periods of time while powered down.

05

Handle drives gently

In order to prevent damage to your drives, ensure they remain cushioned, cool & dry. Turn them off before you move the devices, and prior to handling a bare board with no covering, remove static electricity from your body.

06

Protect against power

A surge protector (or better yet, use an uninterruptible power supply) for your computer and NAS device helps shield against spikes and loss of power which may cause corruption of files and harm components on your circuit boards.

// don't believe it

Myths, busted.

There are many “quick fix” options available online that can do much more damage to a drive than good. The methods listed below are some of the top destructive actions we have seen damaging the most drives.

✕“Placing a dead hard drive into a freezer will help it come back to life.”
✓This method was used years ago. However, today this action has created more issues than solutions. Thermal shock, along with moisture causing condensation, damages both the circuitry and the platters on the drive. Place the drive at room temperature and ship it to us.
✕“Every recovery program works.”
✓Software repairs only address logical errors on a good physical hard drive. If software continues to run on a failing drive that shows signs of mechanical failure, it will continue to energise the drive, making the condition worse. Therefore, if the drive is acting or sounding improperly, cease usage immediately.
✕“A few taps should be able to recover a clicking hard drive.”
✓The reason you heard a clicking noise is because your read/write heads are failing. Each time you run your hard drive, it removes another small piece of material from the platter(s). Any attempts to repair by shaking/tapping the drive will only hasten the destruction of your platter(s), therefore disconnect the drive and allow it to rest.
✕“Deleted means gone forever.”
✓When files are deleted on a hard drive, the actual data typically remains intact until overwritten. Stop writing to the disk. Files deleted on an SSD can be erased in just a matter of minutes via TRIM commands. Act quickly.
✕“RAID means I have backups.”
✓RAID protects you if one of your drives dies, but it doesn’t protect against file corruption, accidental deletion, ransomware attacks or a botched rebuild. That’s redundancy, not a backup; you will still need a separate copy.
✕“A reinstall won’t overwrite my files.”
✓A reinstall writes directly over the space occupied by your lost files. If your files matter, get them recovered first and then reinstall.
// when you're ready

Not sure what you've got? Let us take a look.

Every single recovery starts with a complimentary diagnostic in writing. We will let you know exactly what can be recovered from your drive and how much it is going to cost prior to us charging you for services. In most cases you only pay if we recover your data.

Drop off at Building 2, Ground Floor, Guildford GU2 8XH · or post insured · Mon–Fri 9am–5:30pm