Miracle Workers: rescuing data from the jaws of disaster
Even if you've dropped your laptop or your server has been set on fire, all hope is not lost. Data recovery companies such as Kroll Ontrack could still rescue your valuable files. Jim Martin dons a white lab coat and goes behind the scenes at a data recovery lab.
Microscopes are used for inspecting platter damage more closely, and to check for any damage that isn't visible to the naked eye. Another recovery technique involves cleaning any debris from the platter surfaces before powering the disk up to image it. Even smoke particles can damage the platter, as they are larger than the gap between the read/write head and the platter - just a few microns - and can get caught between them.
When a disk is dropped or knocked, perhaps when a laptop is placed roughly on a desk, the read/write heads can hit the platters. The damage can be minor or severe, but if any particles are chipped off, this can fly around and cause further damage - this is why it's important to act quickly if you suspect your disk has been damaged following a drop.
Some disks arrive in the clean room with seized bearings. The engineers are able to fix this, either by fitting replacement parts or by repair, in order to get the drive spinning again. Ontrack currently stores around 1,500 different hard disk models which can be used for spare parts to repair failed disks quickly.
Kroll Ontrack claims to maintain a huge supply of spare hard disks
Even circuit boards can be quickly swapped over where the problem is electronic rather than mechanical. Often, you can't simply replace a controller board with an identical model as calibration data is stored on the chips. Ontrack can copy this data to a new board to get a drive running again.
Don't lose your head
Solid-state disks
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
SSDs are still relatively new, and the recovery process is not yet automatic. Where an interface has been damaged - for example if the SATA connector has been snapped off - engineers can repair the electrical connections in order to copy the data off the drive. The same technique also applies to USB flash drives, which are fairly vulnerable to damage.
Removing memory chips from a SSD with the aid of a microscope
When it isn't possible to repair the interface, or there's another problem causing the data to be inaccessible, the memory chips can be removed from the circuit board and the data read directly from them. Data is usually stored across the chips using RAID, but the data should still be recoverable using Ontrack's proprietary software as long as the intricacies of the chip manufacturer's RAID implementation is documented.