Data Recovery Case File · Second Fixes & Trade Handoffs · What Each Test Checks

Four Passes and One Fail: Reading an Evaluation

The enquiry arrived as a request for a quote against someone else's findings, with the evaluation quoted in full: visual inspection for physical damage, pass; liquid contamination, pass; electronics visual inspection, pass; power-up test, pass; media integrity scan, fail — concluding that the drive has suffered media corruption leading to inaccessible sectors and unreadable areas, including low-level information critical to its basic operation. Reports like this arrive regularly and are usually skimmed for the verdict. It is worth reading properly, because the sequence is deliberate and four passes tell you as much as the one failure does. This is, on the whole, a good report — and there is one question it does not answer that determines what a recovery is worth.

The decode: what each stage tests, and the missing number

Why the order matters: the sequence runs from cheapest and least invasive to most demanding, and each stage is a gate. Visual inspection looks for impact damage, a bent chassis, a damaged connector — the things that would change everything and cost nothing to check. Liquid contamination checks for corrosion and residue, because a drive that has been wet needs different handling entirely. Electronics visual examines the circuit board for burned components, damaged tracks and failed parts. Power-up establishes whether the drive spins, completes its start-up and identifies itself. Only when all four are clear does a media integrity scan ask the real question: can the drive actually read its own surface?

What four passes actually mean: a great deal has been excluded. The drive is not physically damaged, not contaminated, not electrically faulty, and it reaches readiness — so it powers, spins, calibrates and announces itself correctly. That eliminates the mechanical and electronic fault classes wholesale, which is why the report is useful rather than vague. The failure is at the last gate and the last gate only.

What the media failure means: the drive cannot reliably read parts of its own surface. The report's mention of low-level information critical to basic operation is worth noting — it suggests degradation has reached reserved regions the drive uses to manage itself, not merely the user data area, which can affect how the drive behaves during a long read. That is a real finding and it justifies careful, instrumented imaging rather than an ordinary copy.

The question the report does not answer: and it is the one that matters commercially. How much is unreadable, and where? A media integrity failure covers everything from a handful of bad sectors in one region — where a recovery returns essentially all the data — to widespread degradation where large parts are gone. Those are the same verdict and completely different outcomes. So the thing to ask, of any report, is for the extent and distribution: how much of the surface reads cleanly, how much is marginal, how much fails, and whether the bad regions fall in the filesystem's metadata areas or in the data. That determines whether the deliverable will be a complete tree or a partial one, and it should be established before a figure is agreed rather than discovered afterwards.

On second views generally: a report like this is a legitimate starting point and is treated as one — verified independently rather than accepted or dismissed, because the customer paid for it and it contains real information.

On the bench

The prior findings were used as a starting point and independently verified rather than taken on trust or ignored. The Atola Insight Forensic mapped surface condition and error rates to answer the question the report had left open — the extent and distribution of unreadable areas, and specifically whether the degradation had reached the regions holding filesystem metadata, since that determines whether the recovery returns a structured tree or carved content. Imaging then ran on the PC-3000 Express under Data Extractor with per-sector timeouts enforced, healthy regions banked first and weak neighbourhoods revisited on later patient passes, with every unreadable area resolved to the files it affected.

The outcome

The prior findings verified, the extent of the damage mapped, and the drive imaged with the losses reported per file. Free assessment, one fixed written figure including VAT; where a drive has to be opened, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone holding an evaluation like this: the stages run cheapest to most demanding and each is a gate, so four passes exclude physical damage, contamination, electronic faults and start-up failure wholesale — which is genuinely informative; a media integrity failure means the drive cannot reliably read its own surface, and a mention of low-level regions means the degradation has reached the areas the drive uses to manage itself. But the report does not say how much or where, and that is the number that decides what a recovery is worth. Ask for it.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.