One thing to know first
Stop writing to it. Beyond that, this is often yours to fix for free.
Deleting a file removes its entry from the index and marks the space it occupied as reusable. The content stays exactly where it was until something else is written over it. That means the clock is measured in writes rather than in hours: a device left alone holds its deleted files more or less indefinitely, while one still in daily use can lose them within minutes. Stop using the device, and the odds stay where they are.
Often fixable yourself
Deleted files from NAS
A NAS in this state is very often something you can resolve yourself, at no cost, and this page tells you how before it tells you anything about us. Where that doesn't work, the rest explains what the fault usually is and what recovery involves.
What this usually turns out to be
A NAS is the device most likely to have already saved you, and it is worth exhausting that before treating this as a recovery at all. Most units have a network recycle bin that can be enabled per shared folder and is on by default in many configurations, and most also take scheduled snapshots of the volume, which hold a read-only copy of the filesystem as it was at earlier points. Either of those returns the files intact, with their names and folders, in a few clicks. Underneath, the deletion behaves as it would anywhere else: unlinked, not erased.
An array is a set of member disks plus the arrangement that binds them. Losing the arrangement loses the data even when every disk is healthy.
Ordinary deletionbetter news
The index entry is gone, the content remains. This is the standard case and it recovers well.
Emptied from the recycle bin or trashbetter news
Exactly the same situation. The bin was only ever an index entry too.
Deleted from a phone or camerabetter news
Frequently recoverable from the card. On a modern phone, check the app's own recently-deleted album first, and most keep deleted items for thirty days.
Deleted on an SSD with TRIM
The drive is told it may discard the blocks, and often does so within minutes. This case is genuinely unrecoverable, by anyone.
What to check first on a NAS
- Look for a #recycle or similar folder inside the share the files were deleted from. This is where most NAS deletions are found.
- Check the unit's snapshot list and browse an earlier snapshot for the folder in question.
- If neither exists, stop writes to the share and pause anything that backs up or syncs to it.
What not to do
Do not run a rebuild, scrub or consistency check to tidy things up, and do not let a backup job run onto the volume. Those write across the array and can overwrite exactly the free space holding the deleted content.
Try this before you pay anyone
Check the free options in this order before paying anyone anything
- Look in the recycle bin or trash first, then in the application's own recently-deleted folder. Photos apps, mail clients and most cloud tools keep deleted items for around thirty days, and this alone resolves a great many cases in under a minute.
- Check whether the file is in a backup or a synced cloud copy: File History or a Time Machine snapshot, or version history in OneDrive, Google Drive, Dropbox or iCloud. Version history survives a deletion that syncing propagated everywhere else.
- If none of those, stop using the device before running anything. Then recover with Recuva, PhotoRec, or Microsoft's free Windows File Recovery, always writing the recovered files to a different drive.
- For a memory card, take the card out of the camera and read it through a card reader rather than letting the camera or phone touch it again.
If the deleted file was on an SSD with TRIM enabled, it is very likely gone at the flash level within minutes and no tool or lab will bring it back. That is worth accepting early rather than paying to discover. On a mechanical drive there is no such mechanism, and the file waits until something overwrites it.
How recoverable this is
Frequently excellent on mechanical drives and memory cards, especially where the device was taken out of use quickly. This is the single most self-recoverable case on the site and most readers should not be paying anyone for it. The exception is an SSD with TRIM, where deletion is effectively immediate and permanent regardless of who is asked.
What moves it, for your device specifically:
- How much has been written to the device since the deletion
- Whether the filesystem journal still holds the original entries
- Whether the files were large and contiguous, or small and scattered
We will not give you a percentage for your device, and you should be wary of anyone who does. Nobody can know what is recoverable until the media has been imaged and read. What is above describes this class of failure; your drive gets its own answer after an assessment, in writing, at no cost.
What it costs
from $690
RAID, NAS and servers
Arrays rebuilt from the member disks rather than trusting the controller that failed. Any filesystem, including ext4, Btrfs, ZFS and VMFS.
What moves a job within its band: capacity, how much of the media is unstable, whether the filesystem is encrypted, and how much of the drive has to be read before the files you need are reachable. You get one fixed figure after the assessment and it does not move afterwards. If we can’t recover what matters to you, there is no recovery fee.
Other faults on a NAS
Next step
Tell us what failed.
Free assessment. Fixed quote before recovery starts. No recovery, no fee. Sydney drop-off or Australia-wide by tracked post.