Data Recovery Case File · Formatted & Logical Faults · Hope It Was the Hard Drive

An Unknown Date, Two Drives, and Which to Hope For

His enquiry was brief, unhurried and quietly serious. "I have lost a video of my wife and I taking our wedding vows. I don't know when it was lost, as it's only just been noticed — could have been anytime in the last 8 months. I have both an SSD and a hard drive, and it could have been stored on either, though more likely the SSD." Email contact was requested and honoured. Two things shape the answer, and the second one inverts what most people expect. The eight-month uncertainty is the difficulty. And of his two drives, he should be hoping it was on the older, slower one — because on the modern drive he suspects, a loss that old is very probably beyond reach, while on the hard drive it may be sitting there untouched.

The decode: why the older drive is the better hope

What happens on a hard drive: when a file is deleted or lost, its entry is removed and the space is marked available. The data itself stays physically written until something else is placed on top of it. Nothing clears it in the background. So on a drive with plenty of free space and moderate use, a file lost eight months ago can still be entirely present and recoverable — unlisted, but intact. Time alone does not remove it; only new writes landing in the same place do.

What happens on a solid-state drive: the opposite, and this is the part that surprises people. Flash memory must erase a block before it can be rewritten, which is slow, so operating systems tell the drive which blocks are no longer in use and the drive clears them in the background ready for future writes. That housekeeping runs continuously and completes within minutes. So on an SSD, a deleted file is not merely unlisted — it is physically cleared, usually before the owner has left the room. Eight months later there is nothing to find.

Why that inverts the usual instinct: he suspects the SSD, because that is where his current work lives. But the newer, faster, more reliable drive is the one where an old loss is unrecoverable, and the older mechanical drive is where it may have survived. If the video turns out to have been on the hard drive, his odds are genuinely reasonable. If it was on the SSD and was deleted, the honest answer is that it is almost certainly gone — and that should be said before he spends anything rather than discovered afterwards.

What to do before any of that: the free search, which on a wedding video is unusually likely to succeed. Footage of vows rarely exists in one place: whoever filmed it will have the original, phones back up video automatically to accounts, and clips of that kind get shared — sent to family, posted, put in a message thread, copied to a parent's computer, or included on a disc or drive from a videographer. Eight months of not noticing suggests it had been sitting unwatched, which also means it may have been copied somewhere at the time and forgotten. That search costs nothing and should happen first.

And the immediate instruction: if there is any chance the file was on the hard drive, that drive should stop being used now — every new file written to it risks landing on the space the video occupies.

On the bench

The free avenues were worked first, because a copy found in an account or on a relative's machine beats any bench outcome and costs nothing: the original filming device, cloud accounts, message threads and anyone who might have been sent it. Both drives were then imaged write-blocked. On the hard drive image, deleted directory entries were recovered where they survived and free space carved format-aware for video, which is well suited to it — large, contiguous files with strong internal signatures. On the solid-state drive the honest position was set out in writing before work, and residual regions examined for anything the housekeeping had not reached.

The outcome

The free sources searched first, both drives imaged, and the realistic position stated for each before any work. Free assessment, one fixed written figure including VAT; where a drive has to be opened or a chip removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone with an old loss and more than one drive: hope it was the hard drive, because deleted data there stays physically present until something overwrites it, so months can pass and it may still be intact — whereas a solid-state drive clears freed blocks in background housekeeping within minutes, which makes an old deletion effectively unrecoverable; that inverts the usual instinct about which drive is better; and search the free sources first, because footage of a wedding almost always exists somewhere else.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.