Disaster Strikes: How Is Data Recovered From A Dead Hard Drive?

Page 2 - Seeking answers? Join the Tom's Hardware community: where nearly two million members share solutions and discuss the latest tech.
Status
Not open for further replies.
This would have done me very little or no good last year when I lost my home to a fire. Lost around 9TB worth when the fire reached my room and ruptured a gas line, the heat from the fire destroyed the drives to the point of melting. Wasn't happy at all and made all the worse when I found pools of melted copper.
 
It's sad that's Seagate is dismantling such a great data recovery lab after buying them 5 years ago. This may be the last time you get this quality of data recovery from Seagate before they start outsourcing data recovery to the cheapest low-skill bidder in Asia.
 


It depends on the encryption and what is failed on the drive.

Software Encryption is very different than hardware encryption problems, and Self Encrypting drives are a further problem still.

It takes a LOT of Research work to deal with encryption of various kinds, and Actionfront was always very up to date on it.

Unfortunately, I doubt they will continue to be as technically advanced in the future with a significantly downsized team.
 


You wouldn't use SSD on a primary storage array like this, though you wouldn't want to use Raid 5 either, You'd probably want RAID 10 with drives this size.

In terms of the cost of SSD recovery, it depends on what's failed, repairing the PCB to fix diodes/capacitors, etc... is not much different than repairing a hard drives logic board.

However, chip-off rebuilds of SSD's are much more time/labor intensive so they are more expensive on average than data recovery from mechanically failed drives.

 


Data recovery on a mechanically failed hard drive is very different from a chip-off rebuild of a physically failed SSD.
 
RAID5 is not recommend because a large portion of the time that one drive fails, a second drive is also about to fail. Think of light-bulbs in a chandelier.

Not only that, but the rebuilding of the drive puts extra load on the other drives, which also increases the likelihood of another failure.

The rule of thumb is at least RAID6(RAID-Z2 in ZFS terms), and if your drives are larger than 1TB, then at least 3 parity drives or RAID-Z3. I'm not sure if many raid controllers support 3 parity drives, but I know ZFS does.
 
Thank you all for the kind comments. A few responses that I can answer at present:

lilcinw, yes, that beast is on its way to recycling. And good riddance.

JOSHSKORN, my bad. There was recently a format change with these picture stories. I'm not able to get full-res anymore, either. I will ask editorial about this. Perhaps I'm missing something.

ram1009, SSD is not the answer. SRS also has an SSD recovery group that we were not able to photograph in the time we had. Fortunately, I'm now working with Flashback Data to do a similar article strictly dedicated to their SSD forensics and recovery process. It should be sweet. ;-)

Quarkzquarkz, you know me and the details of my life so well. Thanks for judging. Bad writer! No biscuit!
 
williamvw, thanks for the article! Very interesting to see how it's done.


I've dealt with a lot of small businesses in recent years. Never ceases to
amaze me how few of them have any kind of data backup strategy. Most of
the setups I deal with are industrial control systems (ie. UNIX systems
used to drive knitting machines, medical scanners, etc.) and thus
typically use SCSI. I tend to get called when things have already begun to
go wrong; once repaired (which typically involves replacing old 1GB to 9GB
50pin SCSI with 36GB 15K SCSI), I've strongly encouraged such companies to
at the very least have a 2nd drive which can be used as a backup clone,
copied regularly either manually for automatically via the cron scheduler
(I provide them with some custom cloning scripts & commands).

Two weeks ago one such company, a small high-street clothing store with a
Stoll knitting machine, called saying they had a problem after trying to
connect a Magneto Optical drive to the system; the MO drive was faulty,
but it messed something else up. Checking it out, I concluded the
configuration files had been corrupted. Thankfully, because of the 2nd
drive I'd installed a year ago, they had a clone backup, though they
guiltily admitted it hadn't been refreshed since April this year. However,
it was sufficient, since only the user data tends to change on such
systems. I transferred the user data across to the clone, made that the
new OS drive, then redid the clone so there was a fresh backup. They were
up & running again within a few hours. Without the backup, a fresh install
would have been required (that would have delayed their work by several
days, which would mean lost sales).

All too often it seems, companies don't realise how important backups are
until something bad happens. A few have a backup device of some kind for
general data, typically an old DAT or MO unit, but virtually none have
thought of the consequences of their main system drive dying; I encourage
them to continue backing up their user data by whatever means they deem
fit (modernising if possible), but setting them up with a system drive
backup clone has saved the day soooo many times. 8)

For consumers, I expect few ordinary users would even think about the
notion of their storage device going wrong, especially if they're not that
tech-savvy. They may not understand how their data is stored, given the
way newer devices are used in a more "black-box" manner than traditional
PCs. I help hobbyists out a fair bit, so I at least make sure they think
about these issues; and if I sell a system, I always include an extra free
disk that's a clone backup of the system disk, just in case.

Ian.

 


Why Flashback Data? They are a relatively new company that's not even on the same planet(technically speaking) as the guys at Seagate and other long-standing data recovery labs. Your average senior DR engineer has been doing physical data recovery longer than Flashback has even been in business.
 
TyrOd, you may be right. But how about we wait and see how the article turns out before throwing them under the bus? You may be pleasantly surprised.
 
I've been involved in High Technology for about 40-45 years, and I would rate this as ONE of the best written articles that I have ever read!
Thanks. Very Objective - Truthful.
 
So which NAS did you end up getting? also, come on, you gotta share how much it cost you to recover all this data.
At the same time, isn't it a conflict of interest for a company that make hard drives to profit on its own failures? double dipping at the users expense? The service is good, but it should have another name.
 
TyrOd is correct. Flashback Data is no where close to Seagate Recovery Services caliber. It is a shame they decided to close the Chicago facility and relocated to Oklahoma City.

From a reliable source, they are already shifting recovery drives to a South Korean facility. The quality of their work is sub-par.

It is very sad to see Seagate dismantling such a good team.

R.I.P
 


I'm sure the article will be great, because Data recovery is a totally foreign field even to those involved in computer related services.

The sad fact is that in the past decade their have literally been thousands of start-ups in data recovery and computer forensics.
Why? Because you can literally buy everything you need from "custom' hardware and software to clean room labs, but you can't buy the best engineering talent.

The engineers that develop hardware/software tools on the level of Seagate's previous team number maybe 30-40 nationwide.

Further, many of them have moved on from data recovery to producing kits for other start-ups and the whole industry has suffered a decline in competency.

Unfortunately, there are literally hundreds of labs on the caliber of Flashback nationwide and EVEN MORE computer forensic companies that outsource data recovery to these labs.

There's nothing inherently bad or uninteresting about Flashback, but in an industry that has ballooned from dozens to thousands of competitors in 10 years, they are just average.
 
"Special claw-like tool" which can be seen on the picture above and with which is done safe and non-contact head replacement on this Seagate HDD, is a product of HDDSurgery from Serbia.All of you who are interested in head replacement and other data recovery hardware tools, please visit www.hddsurgery.comGreetings to you all from Belgrade, Serbia!Žarko
 
"Special claw-like tool" which can be seen on the picture above and with which is done safe and non-contact head replacement on this Seagate HDD, is a product of HDDSurgery from Serbia.All of you who are interested in head replacement and other data recovery hardware tools, please visit www.hddsurgery.comGreetings to you all from Belgrade, Serbia!Žarko
 
I am so glad I invested some funds into a single LTO 4 backup drive for home use. Yes its tape backup but very reliable for backing up stuff. Sure makes backing up my large collection of media and Movies a breeze when you have a failure.
 
Status
Not open for further replies.