External Hard Drive Recovery

External Hard Drive Recovery

No Fix - No Fee!

Our experts have extensive experience recovering data from external hard drives. With 25 years experience in the data recovery industry, we can help you securely recover your data.
External Hard Drive Recovery

No Fix? No Fee!

There's nothing to pay if we can't recover your data.

Laptop data recovery

No Job Too Large or Small

All types of people and businesses avail of our services from large corporations to sole traders. We're here to help anyone with a data loss problem.

Laptop on charge

Super Quick Recovery Times

We offer the best value data recovery service in Swansea and throughout the UK.

Laptop in use

Contact Us

Tell us about your issue and we'll get back to you.

Swansea Data Recovery: The UK’s External HDD & NAS Recovery Specialists

For 25 years, Swansea Data Recovery has been the UK’s leading specialist in recovering data from External Hard Drives and Network-Attached Storage (NAS) devices. We understand the critical data held on these portable and network drives—from family photos to business archives. Our laboratory is equipped with the advanced tools and certified cleanroom environment necessary to tackle every type of failure, from simple logical errors to complex mechanical and electronic damage across all manufacturers and interfaces.


Top 30 External HDD Manufacturers & Popular Models in the UK

We support and recover data from every major external drive manufacturer, including but not limited to:

ManufacturerTop-Selling External & NAS Models
1. Western Digital (WD)My Passport, My Book, Elements, Black D10, Red (NAS), Purple (CCTV)
2. SeagateExpansion, Backup Plus, One Touch, IronWolf (NAS), SkyHawk (CCTV), FireCuda
3. ToshibaCanvio Basics, Canvio Advance, Canvio Flex
4. SamsungT5, T7 Shield, T7 Portable SSD, X5
5. LaCieRugged, d2 Professional, Blade SSD, Porsche Design
6. ADATASD700, SE800, HV620, HD710
7. SanDiskExtreme Portable, Extreme Pro, Extreme SSD
8. CrucialX6, X8, X9 Portable SSD
9. KingstonXS2000, NV2 (Enclosures), DataTraveler Max
10. CorsairVoyager GTX, Voyager SL
11. SabrentRocket XTRM-Q, External Enclosures
12. G-TechnologyG-DRIVE, G-RAID, ArmorATD
13. BuffaloMiniStation, LinkStation (NAS), TeraStation (NAS)
14. SynologyDiskStation (NAS units – we recover the drives within)
15. QNAPTS, TVS Series (NAS units – we recover the drives within)
16. TranscendStoreJet, ESD350C
17. Iomega(Legacy) eGo, Prestige
18. VerbatimStore ‘n’ Go, Premium
19. LenovoF308, L-series External Drives
20. Fantom DrivesGForce, GForce3
21. OWCMercury Elite, Envoy Pro
22. GlyphAtom, Blackbox Plus
23. ApricornAegis Padlock, Aegis Fortress
24. Seagate TechnologyMaxtor M3, Expansion Portable
25. WD_BLACKD10, P10 Game Drive
26. HPP500, P600
27. DellExternal Hard Drive Series
28. LenovoF308, L-series External Drives
29. Sony(Legacy) Portable HDD Series
30. IntensoPortable, External SSD

Supported Interfaces & Fault Types

We recover data from every interface used in external and NAS storage:

  • Common External Interfaces: USB 2.0, USB 3.0, USB 3.1, USB-C, Micro-USB, FireWire 400/800, eSATA.

  • Internal Drive Interfaces (within enclosures): SATA (I, II, III), PATA (IDE), SAS, SCSI, PCIe, NVMe, M.2 (SATA & NVMe), U.2.

  • NAS-Specific Connections: Ethernet, directly from the SATA/SAS bays.

We specialise in all associated faults, including Mechanical Failure, Bad Sectors, Firmware Corruption, Logical Corruption, PCB Failure, Accidental Deletion, and more.


Top 25 External Hard Drive Errors & Our Technical Recovery Process

Here is a detailed breakdown of the most common failures we resolve, with a technical insight into our lab processes.

1. USB Bridge Board / PCB Failure

  • Summary: The external enclosure’s interface board has failed, often due to a power surge or physical damage, preventing communication with the internal drive.

  • Technical Recovery: We bypass the external enclosure and connect the internal drive directly to our PC-3000 or DeepSpar hardware. If the internal drive is standard SATA/PATA, we image it directly. If the drive uses a proprietary interface or hardware encryption on the bridge board, we must repair the original bridge or source a compatible donor to act as a translator. We use soldering stations and chip programmers to transfer any necessary firmware from the original bridge board to a donor.

2. Accidental File Deletion or Formatting

  • Summary: The user has deleted files or formatted the drive, removing the logical file system structure.

  • Technical Recovery: We create a forensic sector-by-sector image of the drive to prevent overwriting. Using tools like R-Studio and UFS Explorer, we perform a deep scan of the entire drive, parsing raw data for file signatures (file carving) and analysing surviving file system metadata (e.g., $MFT for NTFS, Catalog File for HFS+). For formatted drives, we reconstruct the partition boot sector and directory tree by locating backup copies of the file system metadata.

3. Mechanical Bearing / Spindle Motor Failure

  • Summary: The motor that spins the platters has seized due to worn bearings, often resulting in a quiet drive that doesn’t spin up or emits a grinding noise.

  • Technical Recovery: In our Class 100 ISO 5 cleanroom, the HDA (Hard Drive Assembly) is opened. The entire platter stack and bearing assembly is transplanted into an identical donor HDA with a confirmed healthy motor. This requires extreme precision to maintain platter alignment. The donor HDA is then connected to our imaging hardware to create a clone.

4. Head Stack Assembly (HSA) Failure – “Click of Death”

  • Summary: The read/write heads are damaged or contaminated, causing the drive to click repeatedly as it fails to read service data and re-calibrate.

  • Technical Recovery: Cleanroom disassembly is mandatory. The damaged HSA is carefully removed. We source a compatible donor HSA from our inventory. A critical step is often micro-soldering to transfer the original preamplifier (pre-amp) chip from the patient HSA to the donor HSA to ensure compatibility with the drive’s unique adaptive data. The donor heads are installed, and the drive is immediately imaged using hardware that controls read retries to prevent new head damage.

5. Firmware Corruption in Service Area

  • Summary: The drive’s internal operating system, stored in the Service Area on the platters, is corrupted. The drive may not be detected, or may freeze during initialisation.

  • Technical Recovery: Using a utility like PC-3000, we place the drive into a technological mode to bypass the public firmware. We directly access the Service Area to diagnose and repair corrupted modules (e.g., TRANSLAT, SMART, CERT). This involves using factory-level commands to rewrite damaged modules with known-good versions from our database, carefully adapting them to the specific drive’s configuration parameters stored in its RAM.

6. Bad Sectors & Media Degradation

  • Summary: The magnetic surface of the platters has developed weak or unreadable areas, leading to data read delays and failures.

  • Technical Recovery: We use hardware imagers (DeepSpar, Atola) with sophisticated control algorithms. The process involves reading data in a non-destructive manner, employing techniques like soft-resets to bypass unreadable sectors and adjusting read timeout/retry parameters. For persistent areas, we may apply a firmware-level tweak to temporarily reduce the drive’s read retry thresholds (e.g., modifying the “Read Retry” and “Read Fly Height” adaptive parameters) to extract data before the drive marks it as permanently bad.

7. Power Surge / TVS Diode Failure

  • Summary: A voltage spike has damaged protection components on the PCB, such as the Transient Voltage Suppression (TVS) diodes, fuses, or the main controller.

  • Technical Recovery: The PCB is inspected under a microscope. We test and replace shorted TVS diodes and blown fuses. If the main controller is damaged, we perform a “ROM transfer”: the serial EEPROM chip containing the drive’s unique adaptive data is desoldered from the patient PCB and transplanted onto a compatible donor PCB using a hot-air rework station. The donor board is then tested.

8. SSD Controller Failure

  • Summary: The SSD’s main processor (controller) has failed, rendering the NAND flash memory chips inaccessible via standard interfaces.

  • Technical Recovery: We perform a “chip-off” recovery. The NAND flash memory chips are carefully desoldered from the SSD’s PCB using a reflow station. Each chip is read individually using a dedicated NAND programmer (e.g., PC-3000 Flash). The raw binary dumps from all chips are then processed through our software, which uses controller-specific algorithms to reverse-engineer the RAID-like striping, XOR parity, wear-leveling, and block mapping to reassemble the original logical data.

9. NAND Flash Wear-Out / SSD Degradation

  • Summary: The flash memory cells have reached their program/erase cycle limit, leading to a high rate of uncorrectable errors that the drive’s internal ECC cannot fix.

  • Technical Recovery: Similar to controller failure, we perform a chip-off procedure. The raw NAND dumps contain a high bit error rate. Our processing software employs advanced, often proprietary, ECC algorithms that are more powerful than the drive’s built-in ECC. We also adjust the read reference voltages for the aged NAND cells through a process called “read retry calibration” to extract the most accurate data possible from the degraded cells.

10. Platter Surface Scoring / Head Crash

  • Summary: Physical contact between the read/write heads and the platters has scratched the magnetic surface, permanently destroying data in those tracks.

  • Technical Recovery: After cleanroom disassembly and head replacement, we use our imaging hardware to perform a full surface scan. The imager is configured to skip heavily damaged areas instantly to prevent new head damage. We recover all readable data first. For the scratched areas, we may perform multiple passes with varying physical head actuator offsets and adjusted read channel settings (like MR head bias) to attempt to read any remaining magnetic flux transitions from the edges of the damaged tracks.

11. Logical File System Corruption (NTFS, HFS+, APFS, EXT4)

  • Summary: Critical file system structures are corrupted due to unsafe ejection, software bugs, or system crashes.

  • Technical Recovery: We work with a disk image. Our engineers perform manual file system repair by locating backup copies of critical metadata (e.g., $MFTMirr for NTFS, Superblock backups for EXT4). For complex corruptions, we use a hex editor to analyse and patch the damaged structures directly, ensuring consistency between the metadata and the actual file data runs. For APFS, we reconstruct the space manager and object map.

12. NAS Drive Failure & RAID Configuration Issues

  • Summary: A single drive has failed in a multi-bay NAS, or the RAID configuration (e.g., SHR) has become corrupted.

  • Technical Recovery: We image every drive from the NAS individually. Using RAID recovery software, we manually determine the RAID parameters (stripe size, order, parity rotation, and disk order) through statistical analysis of the data patterns. We then create a virtual RAID reconstruction. For proprietary systems like Synology Hybrid RAID (SHR), we reverse-engineer the configuration metadata to reassemble the volume.

13. Encrypted Drive Failures (Hardware & Software)

  • Summary: The drive is encrypted (e.g., BitLocker, FileVault, hardware AES), and the drive has a physical failure, or the password is lost.

  • Technical Recovery: We first resolve the underlying physical issue (e.g., PCB, heads, firmware). Once the drive is physically stable and we can image it, the encrypted image is mounted. For hardware encryption on external drives, repairing the original USB bridge is often critical, as the encryption key is tied to it. For software encryption, we rely on the user providing the password or recovery key to decrypt the image.

14. Overheating Damage

  • Summary: Chronic overheating has weakened solder joints (causing “cold solder joints”), degraded electronic components, and accelerated media degradation.

  • Technical Recovery: The PCB is reflowed using a BGA station to repair cracked solder joints under the main controller and RAM. Components are tested for thermal degradation. The drive is then imaged in a temperature-controlled environment, with our hardware monitoring drive health in real-time. We pause the imaging process if the drive’s SMART temperature or error counts rise to dangerous levels.

15. Water & Liquid Damage

  • Summary: The external drive has been exposed to corrosive liquids, causing PCB corrosion and potential internal contamination.

  • Technical Recovery: The PCB is immediately cleaned with high-purity isopropyl alcohol using an ultrasonic cleaner if necessary. It is then inspected under a microscope for corroded traces and components, which are repaired. The HDA is opened in the cleanroom, and all internal components are meticulously cleaned to remove residue. Heads and platters are often transferred to a donor HDA to prevent future corrosion-related failures.

16. Partition Table Corruption (MBR/GPT)

  • Summary: The Master Boot Record or GUID Partition Table is damaged, making all partitions on the drive appear lost.

  • Technical Recovery: We perform a full sector-by-sector image. We then scan the entire drive for backup copies of the partition table. For MBR, we look for a backup copy at the drive’s end. For GPT, we use the primary GPT header to locate the secondary GPT, which is usually intact. If backups are corrupted, we manually reconstruct the table by scanning for partition boot records (e.g., NTFS $BOOT, FAT32 DBR) and calculating partition boundaries.

17. Virus & Ransomware Infection

  • Summary: Malicious software has encrypted, deleted, or corrupted files.

  • Technical Recovery: We image the drive. For ransomware, we analyse the encryption method; in some cases, known decryption tools are available. For data destruction, we use the same techniques as for accidental deletion and file system corruption. We also scour the drive for shadow copies (Volume Snapshot Service), temporary files, or file system journal logs that may contain uncorrupted versions of the data.

18. Failed NAS/SAN Synchronisation or Rebuild

  • Summary: A RAID rebuild or storage pool expansion failed, often due to a second drive failing during the process or encountering bad sectors.

  • Technical Recovery: We image all drives involved. Using the images, we reconstruct the state of the array before the failed rebuild attempt. This often involves manually calculating parity to recover data that was being written or reorganised during the failed process, effectively “rolling back” the logical volume to its last consistent state.

19. Unstable Drives – G-List / P-List Overflow

  • Summary: The drive’s internal defect management tables (G-List and P-List) are full, causing the drive to run slowly and eventually fail as it can no longer reallocate bad sectors.

  • Technical Recovery: We use hardware tools to access the drive’s Service Area and read the defect lists. We can clear the grown defect list (G-List) and perform a full surface scan with our imager, which has its own, more robust, bad sector management. This allows us to stabilise the drive temporarily to extract the maximum amount of data.

20. Adaptives Mismatch (Post-PCB Swap)

  • Summary: A simple PCB swap fails because the donor board’s adaptive data (stored in ROM) does not match the specific requirements of the patient drive’s mechanical components and platters.

  • Technical Recovery: We use a programmer to read the contents of the serial EEPROM (SPD) from both the patient and donor PCBs. We then write the patient’s adaptive data onto the donor board’s ROM. In more complex cases, we may need to read the adaptive parameters from the drive’s Service Area and write them into the donor PCB’s RAM during operation.

21. Slow Performance & I/O Timeouts

  • Summary: The drive is taking excessively long to read files, often due to media degradation, unstable heads, or firmware bugs.

  • Technical Recovery: We connect the drive to our hardware imager and monitor the SMART log and error codes. We then adjust the imaging strategy to use slower, more sensitive read commands. We may disable the drive’s internal read retry and cache functions, forcing it to return data faster, even with errors, which our hardware then corrects through software ECC.

22. File System Journal Corruption

  • Summary: The journal of a journaling file system (NTFS, EXT3/4, HFS+) is corrupted, causing the volume to mount as RAW or dirty.

  • Technical Recovery: We attempt to replay the transaction journal from the drive image. If the journal is irreparably damaged, we discard it and perform a raw file system recovery. This involves scanning for every inode (EXT) or MFT record (NTFS) and rebuilding the directory tree based on the parent directory pointers contained within them, a process known as “orphan file recovery.”

23. S.M.A.R.T. Command Failure

  • Summary: The drive’s Self-Monitoring, Analysis, and Reporting Technology has logged a critical failure (e.g., 197 Current Pending Sector Count, 5 Reallocated Sectors Count), and the drive is pre-failing.

  • Technical Recovery: We use our imaging hardware to clone the drive, prioritising the healthy data first. The process is configured to be highly sensitive to read instability, allowing us to extract data from weak sectors before they become fully unreadable and are reallocated, which can sometimes lead to data loss if the reallocation process fails.

24. Physical Connector Damage (USB, SATA)

  • Summary: The physical port on the external enclosure or internal drive has been broken off the PCB.

  • Technical Recovery: The damaged connector is carefully desoldered. We then solder a new connector onto the PCB, ensuring all pins are properly connected and there are no solder bridges. The board is tested for continuity before power is applied.

25. Drive Not Initialised / RAW Drive

  • Summary: The operating system prompts to initialise the drive because it cannot read the partition scheme, often due to a damaged MBR or GPT.

  • Technical Recovery: This is a logical symptom. We first create a forensic image to secure the raw data. We then perform a deep scan of the image to locate the missing partition boundaries and boot sectors. Using tools like WinHex or DMDE, we manually reconstruct the partition table by writing the correct CHS/LBA values for the partition’s starting and ending sectors, making the data accessible again.


Why Choose Swansea Data Recovery?

  • 25 Years of Expertise: A quarter-century of successful recoveries from every type of external and NAS drive.

  • Class 100 Cleanroom: Essential for successful physical repairs on opened drives.

  • Advanced Tools & Parts Inventory: We invest in industry-leading hardware (PC-3000, DeepSpar) and maintain a vast library of donor parts to maximise success rates.

  • Free Diagnostics: We provide a clear, no-obligation report and a fixed-price quote before any work begins.

  • Multi-Vendor Specialists: We understand the nuances of consumer portables, professional-grade drives, and complex NAS systems.

Contact Swansea Data Recovery today for a free, confidential evaluation. Your data is in expert hands.

Featured Article

Case Study: Forensic Recovery of Deleted NAS Shares and Volumes from a QNAP 4-Bay RAID System

Client Profile: User of a QNAP 4-bay NAS unit.
Presenting Issue: Critical data loss following the accidental deletion of shared folders (Shares) and/or the entire storage volume, potentially triggered by user error or a firmware malfunction. The NAS management interface reports the shares or volume as missing or unavailable.

The Fault Analysis

In a QNAP NAS, data is structured in multiple logical layers, and a failure at any level can cause the symptoms described:

  1. Volume Layer Corruption/Deletion: The storage Volume is a logical container built upon the underlying RAID array. A firmware failure or administrative error can corrupt or delete the volume’s metadata, which describes its file system (typically ext4 or QNAP’s proprietary QuTS with ZFS). Without this metadata, the NAS cannot mount the volume, making all contained data inaccessible.

  2. Share Deletion: Shares (SMB/CIFS or NFS network folders) are logical pointers within the volume’s file system that act as access gateways. Deleting a share often only removes these pointers and access control lists (ACLs), not the underlying data. However, if the deletion is coupled with a background data destruction policy or a volume-level operation, the data itself can be permanently removed.

  3. Firmware Failure Impact: A corrupted firmware update can cause the NAS’s Logical Volume Manager (LVM) configuration to be reset or overwritten. The LVM configuration is the “master blueprint” that defines how the physical disks are assembled into a RAID, then into a volume group, and finally into the active volume. Losing this blueprint renders the system unable to reassemble the data logically.

The Professional Data Recovery Laboratory Process

Recovery requires a forensic approach that bypasses the NAS unit entirely to work directly with the physical disks and manually reconstruct the data layers.

Phase 1: Physical Disk Stabilization and Forensic Imaging

  1. Controlled Disk Extraction: All four hard drives are carefully removed from the QNAP NAS, and their physical order (Bay 0, 1, 2, 3) is meticulously documented. This order is critical for accurate RAID reconstruction.

  2. Individual Drive Diagnostics: Each drive is connected to our PC-3000 system and DeepSpar Disk Imager for a full health diagnostic and sector-level imaging. This step identifies any underlying physical media issues that may have contributed to the logical failure.

  3. Forensic Image Creation: A complete, bit-for-bit image of each drive is created onto our secure, certified storage. All subsequent recovery work is performed on these images, guaranteeing the original evidence remains unaltered.

Phase 2: RAID Parameter Analysis and Virtual Reconstruction

QNAP NAS devices often use a Linux-based software RAID (mdadm) or, in higher-end models, ZFS. The RAID configuration is not stored on a dedicated controller card but on the disks themselves.

  1. RAID Superblock Analysis: Our software scans each disk image for Linux RAID (mdadm) superblocks. These superblocks contain the critical parameters needed to rebuild the array: RAID level (e.g., RAID 5, RAID 6), stripe size (chunk size), disk order, and data offset.

  2. Empirical Parameter Calculation: If the superblocks are corrupted or missing (as can happen after a firmware failure), we must empirically determine the parameters. We perform a block analysis across all four disks, testing millions of combinations of disk order and stripe sizes. The correct configuration is validated when the reassembled virtual array produces a coherent file system signature at the beginning of the logical volume.

  3. Virtual RAID Assembly: Using the identified parameters, we build a virtual RAID within our recovery software. This process interleaves the data from the four disk images according to the deduced RAID algorithm, outputting a single, linear image of the original storage volume.

Phase 3: File System Reconstruction and Data Extraction

With a virtual image of the volume, we now address the file system.

  1. ext4 / ZFS Journal Analysis: We parse the file system journal. For ext4, the journal can be replayed to restore a consistent state just before the deletion or corruption. For ZFS, we examine the Uberblocks to find the most recent valid transaction group.

  2. Recovering Deleted Shares: Network shares are typically defined by directory entries with specific metadata. We scan the recovered file system for inode and directory entry structures that point to the original share folders. Even if the share mapping is gone, the directory and its files often remain fully intact and can be recovered directly.

  3. Data Carving for Permanently Deleted Data: If data was permanently deleted and its metadata erased, we perform a raw data carve across the unallocated space of the virtual volume image. This technique searches for file signatures (headers and footers) of known file types to salvage what the file system no longer tracks.

Conclusion

Data loss on a QNAP NAS is a multi-layered failure involving the RAID array, the logical volume, and the file system. A firmware failure or accidental deletion corrupts the critical metadata at one or more of these layers. A professional lab succeeds by physically deconstructing the system, forensically imaging the drives, and manually reverse-engineering the RAID and volume configuration in software. This process bypasses the failed NAS unit entirely, allowing for the reconstruction of the storage pool and the extraction of data directly from the underlying file system.

The recovery successfully restored the client’s volume and all associated NAS shares, achieving a 98% data recovery rate. The recovered data, with its complete folder hierarchy and share structure, was delivered on a compatible storage device.


Bracknell Data Recovery – 25 Years of Technical Excellence
When your NAS system fails due to firmware issues or accidental deletion, trust the UK’s No.1 HDD and SSD recovery specialists. Our expertise in reverse-engineering complex storage architectures like QNAP allows us to recover data that is logically lost to the original device.

Client Testimonials

“ I had been using a Lacie hard drive for a number of years to backup all my work files, iTunes music collection and photographs of my children. One of my children accidently one day knocked over the hard drive while it was powered up. All I received was clicking noises. Swansea data recovery recovered all my data when PC World could not.  ”

Morris James Swansea

“ Apple Mac Air laptop would not boot up and I took it to Apple store in Grand Arcade, Cardiff. They said the SSD hard drive had stopped working and was beyond their expertise. The Apple store recommended Swansea data recovery so I sent them the SSD drive. The drive contained all my uni work so I was keen to get everything recovered. Swansea Data Recovery provided me a quick and professional service and I would have no hesitation in recommending them to any of my uni mates. ”

Mark Cuthbert Cardiff

“ We have a Q-Nap server which was a 16 disk raid 5 system. Three disks failed on us one weekend due to a power outrage. We contacted our local it service provider and they could not help and recommended Swansea Data Recovery. We removed all disks from server and sent them to yourselves. Data was fully recovered and system is now back up and running. 124 staff used the server so was critical for our business. Highly recommended. ”

Gareth Davies Newport Wales

“ I am a photographer and shoot portraits for a living. My main computer which I complete all my editing on would not recognise the HDD one day. I called HP support but they could not help me and said the HDD was the issue. I contacted Swansea Data Recovery and from the first point of contact they put my mind at ease and said they could get back 100% of my data. Swansea Data Recovery have been true to their word and recovered all data for me within 24 hours. ”

Iva Evans Cardiff

“ Thanks guys for recovering my valuable data, 1st rate service. ”

Don Davies Wrexham

“ I received all my data back today and just wanted to send you an email saying how grateful we both are for recovering our data for our failed iMac.  ”

Nicola Ball Cardiff

“ Swansea Data Recovery are a life saver 10 years at work was at the risk of disappearing forever until yourselves recovered all my data, 5 star service!!!!!  ”

Manny Baker Port Talbot Wales