Hard Drive RecoveryData recovery & digital forensics

Often fixable yourself

Formatted desktop hard drive by mistake

A desktop hard drive in this state is very often something you can resolve yourself, at no cost, and this page tells you how before it tells you anything about us. Where that doesn't work, the rest explains what the fault usually is and what recovery involves.

What this usually turns out to be

A bare SATA drive from a desktop. No enclosure to fail means a fault here is usually the drive itself rather than the thing it was plugged into.

  • Quick formatbetter news

    The default on every platform. It replaces the index and leaves all file content in place. This is the good case, and it is the common one.

  • Reinstalled or re-imaged the operating systembetter news

    Usually a quick format followed by a comparatively small write. Files outside the areas the installer touched are frequently recoverable.

  • Full format on Windows 10 or later

    Writes zeroes across the whole volume. This one genuinely does destroy the data, and no lab recovers it. Worth knowing rather than paying to find out.

  • Formatted, then used

    Each file written since the format may have landed on top of something you want. Recoverability falls with every gigabyte added.

Try this before you pay anyone

This is a genuine do-it-yourself case, and you should try it before paying anyone

  1. Stop writing to the device immediately. If it is an external drive or card, unplug it. If it is your system drive, shut the computer down and recover the drive from another machine.
  2. Get a second drive with more free space than the data you are recovering. Never recover onto the device you are recovering from.
  3. Run PhotoRec, which is free, open source, and carves files out by signature without relying on the index the format replaced. TestDisk, from the same project, can often restore the previous partition structure outright, which brings back filenames and folders too.
  4. On Windows, Microsoft's own Windows File Recovery is free from the Microsoft Store and works well on this exact scenario.
  5. Check the recovered files actually open before you reuse or reformat the original device.

Two limits worth knowing. Files carved by signature usually lose their original names and folder structure, because that lived in the index the format replaced. And if the device is an SSD with TRIM active, the drive may already have discarded the data at the flash level within minutes of the format. In that specific case there is nothing for any tool or any lab to find, and anyone who tells you otherwise is guessing with your money.

How recoverable this is

One of the most recoverable situations there is, provided nothing has been written since. A quick format leaves the file content untouched, and a large share of these are resolved by the reader themselves with free software in an afternoon. The two exceptions that genuinely close the door are a full format on Windows 10 or later, which writes zeroes everywhere, and TRIM on an SSD, which discards the data at the flash level. Both are worth knowing before you spend anything.

What moves it, for your device specifically:

  • Whether it was a quick format or a full one
  • How much has been written to the device since
  • Whether the device is an SSD with TRIM enabled
  • Whether the original partition structure can be restored, which brings names and folders back with it

We will not give you a percentage for your device, and you should be wary of anyone who does. Nobody can know what is recoverable until the media has been imaged and read. What is above describes this class of failure; your drive gets its own answer after an assessment, in writing, at no cost.

What it costs

from $249

Deleted, formatted or corrupt (drive healthy)

Files deleted, a drive reformatted, a partition lost, a filesystem that won't mount. The media itself is fine; the map to the data isn't.

What moves a job within its band: capacity, how much of the media is unstable, whether the filesystem is encrypted, and how much of the drive has to be read before the files you need are reachable. You get one fixed figure after the assessment and it does not move afterwards. If we can’t recover what matters to you, there is no recovery fee.

Not quite your situation?

Pick the device and what it is doing, and this gives you the same answer for that combination instead.

1What kind of device is it?