🇫🇷 Dafotec France · ISO 5 cleanroom laboratory in Roubaix since 2004FR·EN · 🇧🇪 Belgium · 09 83 70 00 00
Dafotec FranceData recovery09 83 70 00 00
The Guide · Chapter 01 — Hard drive HDD

Recovering a hard drive: the laboratory method

Recognize the failure, make nothing worse, understand what the lab does. This chapter walks through the real process of an HDD recovery — from first symptom to return — and the figures we observe since 2004.

Logical failure95%
Firmware / Service Area85%
Mechanical failure78%
Read time~10 min

A hard drive (HDD) stores data on spinning magnetic platters, read by heads flying a few nanometers above the surface. This high-precision mechanism explains both its fragility and the difficulty of recovery: as soon as a physical part is affected, every additional power-up can destroy a little more data. The first useful move is therefore, almost always, to power the device off.

This chapter is for the individual who hears the drive "clicking" as much as for the IT manager deciding between an in-house attempt and sending it to a lab. It doesn't replace a diagnosis, but it lets you understand what's at stake and avoid the irreversible mistakes.

1 · Recognize the type of failure

Four families of failure call for four very different approaches. Confusing them means risking the wrong move — often a destructive one.

Logical failure

The drive is detected and spins normally, but the data is inaccessible: deleted files, formatted partition, RAW file system, corruption after a power cut or a virus. The physical device is healthy; the logical structures (partition table, MFT, catalog) are damaged. This is the best-prognosis scenario — 95% success — provided you stop writing to the drive.

Electronic failure

Power surge, short circuit, burning smell: the printed circuit board (PCB) under the drive is damaged, often at the protection component (TVS). The drive no longer powers up or isn't detected. Recoverable in about 88% of cases — but not by naively swapping the board (see below).

Firmware failure

The drive spins but stays invisible, or reports 0 GB capacity: the microcode stored on a reserved area of the platters, the Service Area, is corrupt. The user data is intact but unaddressable. With Service Area access, about 85% success.

Mechanical failure

Repeated clicking, scratching, buzzing, a drive that spins without being read: the read heads or the motor are damaged. This is the most critical failure — every start worsens the damage — and it requires a cleanroom intervention. Success around 78% when a compatible donor drive is available.

The reflex that saves data. At the slightest abnormal noise or an undetected drive: power off, unplug, do not plug back in "to check." On a mechanical failure, 30 minutes of attempts can drop the odds from 80% to under 20%.

2 · The laboratory process, step by step

Whatever the failure, the order of operations is invariable. It's this discipline — not a miracle tool — that separates a laboratory from a workshop.

Step 1 — Non-destructive diagnosis

Visual and electronic inspection (microscope, PCB measurements), listening to the mechanical behavior, reading S.M.A.R.T. parameters when the drive allows. Goal: classify the failure without ever forcing the device. The outcome is a prognosis and a price range.

Step 2 — Forensic imaging

Before any repair, we make a sector-by-sector image of the drive to a file, using a write blocker and specialized imagers (ddrescue, PC-3000, DeepSpar). The logic: read healthy zones first, bypass defective ones, and never work on the original again. The image is sealed with a SHA-256 hash. This is the invisible foundation of any serious recovery, and what makes the process compatible with judicial use (ISO/IEC 27037).

Step 3 — Intervention by failure type

Only here do the specific operations come in:

  • Head-stack transplant (HSA). On mechanical failure, we don't repair the heads: we transplant a complete stack from a twin donor drive (same model, same firmware revision, ideally same production week), with sub-0.3 µm alignment, then reprogram the patient drive's adaptive modules.
  • Firmware & Translator rebuild. Through a factory-mode serial terminal, we patch corrupt modules (G-List, P-List, S.M.A.R.T.) and rebuild the Translator that maps logical addresses (LBA) to physical ones — without writing to the user area.
  • PCB swap with ROM transfer. Swapping the board isn't enough: each PCB stores drive-specific parameters in ROM (factory defect map, calibration, motor profile). We always transfer that ROM before powering back on, or the data is unreadable.
  • SMR & helium drives. Shingled (SMR) and sealed helium drives require dedicated modules and specific cleanroom handling.
  • Scratched platters / platter swap. On a head crash, we mask the failed heads to read outside the scratch; as a last resort, a platter swap into a donor body — the most delicate operation in the trade.

Step 4 — Logical extraction

Once the image is obtained, we rebuild the file system (NTFS, exFAT, APFS, ext4…), repair damaged structures and, if needed, perform data carving (recovery by file signatures) for items whose metadata is gone.

Step 5 — VeriFiles & return

You receive the full list of recoverable files (VeriFiles service) and approve it before any payment. Data is returned on a new encrypted device. The fee is charged only on success.

3 · Success rates by scenario

Averages observed across 120,000+ cases since 2004. Each case remains unique; the free diagnosis refines the prognosis.

  • Logical failure (format, deletion, RAW) — 95%
  • Electronic failure (PCB swap + ROM transfer) — 88%
  • Firmware (Service Area access) — 85%
  • Water damage treated within 48h — 80%
  • Mechanical failure (HSA transplant, donor available) — 78%
  • Severe head crash (scratched platters) — around 40%

4 · The mistakes that destroy data

What you must never do to a failing hard drive

  • Restart a clicking drive — every rotation extends the scratches.
  • The freezer or rice — thaw condensation short-circuits the electronics, corrosion continues.
  • Swap the PCB yourself — without ROM transfer, the drive produces unreadable data.
  • Run Recuva, TestDisk or EaseUS on a physical failure — software forces millions of reads that worsen the damage.
  • Open the drive outside a cleanroom — a single dust particle on a platter causes a permanent scratch.

Special case — logical failure. This is the only situation where consumer software may suffice. Even then, the golden rule holds: work on a cloned image, never on the original drive, and stop writing to the affected device immediately.

5 · Try it yourself or send it to the lab?

Simple rule: if the drive is physically healthy (detected, silent, correct capacity) and the problem is purely logical, an experienced user can attempt recovery on a cloned image. As soon as an abnormal noise, non-detection, wrong capacity or burning smell appears, the failure is physical: any software attempt is counterproductive, and the lab becomes the only reasonable option. When in doubt, the free diagnosis settles it at no risk.

Every hour counts

Is your drive clicking or no longer detected?

Power it off and send it to our lab. Free diagnosis within 24h, your file list before any payment.

Free diagnosis24h emergency