Case file, 2020 · 500 GB 2.5-inch Seagate laptop drive, BitLocker-encrypted
An encrypted laptop drive with failed firmware
A laptop drive with no visible damage that the computer could no longer read. It was encrypted with BitLocker, and the client had the recovery key.
97,972files recovered
530files not recoverable, about 0.5%
7 daysfrom drop-off to done
What made it difficult
- Firmware modules were missing or corrupt, so the drive couldn't present its data to a computer at all.
- Bad sectors had piled up past the drive's spare reserve, many of them in the Master File Table, the index Windows uses to find every file.
- The whole drive was encrypted, so the recovery had to work through BitLocker with the client's key.
What we did
- Repaired the firmware so the drive could be read.
- Built a full 1:1 image over several hardware and software passes, skipping damaged areas first and coming back to them.
- Repaired the file system on the image and extracted the files.
The result
Of 98,502 files, 97,972 came back and 530 could not be recovered. Diagnosis and quote took three days from drop-off; the client approved it the same day, and the recovery was finished four days later.
Lab notes: Firmware module repair · reallocation reserve exhausted · MFT damage · BitLocker
Similar problem?
Free evaluation
Tell us what happened
Send the details or call (587) 387-2346. We'll tell you what to do with the device until you get here.
Drop-off: Southcentre Executive Tower, #610 - 11012 Macleod Trail SE, Calgary. Monday to Thursday 8:00 AM to 6:00 PM, Friday 8:00 AM to 5:30 PM.
Matthew Kinderwater
Director of IT, iCube Development (Calgary) Ltd.
Oversees every recovery.Save contact card