Data recovery services: when they help and when they cannot

What a recovery lab actually does

Data recovery specialists work on storage that has failed or been damaged. For mechanical hard drive failures, they open the drive in a clean room, replace damaged parts such as read heads with matching donor parts, and image the platters carefully. For electronic failures, they may repair or swap circuit boards. For solid state drives, they use specialised tools to read the memory chips and reconstruct the data. The aim is always to make a full copy of the damaged drive, then extract files from that copy.

This work requires equipment, parts and skills that general IT technicians do not have. That is why the advice is to stop using a failing drive and avoid home remedies: every attempt to power it up or repair it in software risks the damage that a lab would otherwise have been able to work around.

When recovery is likely to succeed

Chances are good when a drive has failed physically or electronically but the platters or chips are intact, when files have been accidentally deleted and the drive was not used much afterwards, or when a drive has been quickly formatted rather than securely wiped. Damaged RAID arrays can often be reconstructed, provided nobody has rebuilt them incorrectly or written new data across the disks.

Water and fire damaged drives can also be recoverable if they are handled correctly. Do not try to dry or power them; seal them in a bag as they are and get them to a specialist promptly. Early action and leaving the drive untouched both improve the odds. Tell the lab exactly what happened, including any attempts already made, because that history shapes how they approach the job.

When recovery cannot help

Some situations are beyond any lab. Data that has been overwritten by new data is generally gone. Drives that were securely wiped, or encrypted with a key that has been lost, cannot be read. Platters that are physically scored by a head crash may be beyond recovery in the damaged areas. And files encrypted by modern ransomware cannot usually be decrypted without the criminal's key, unless security researchers have published a free decryptor for that specific strain.

Cloud data is a separate matter. If a Microsoft 365, Google Workspace or Dropbox account has been deleted and its retention period has passed, there is no physical drive you can send to a lab. The provider's own data centres are not something a recovery service can access, which is why independent cloud backups matter so much.

Costs, quotes and choosing a lab

Recovery pricing varies widely depending on the type of failure, the type of drive and how urgently you need the result. Simple logical recoveries cost much less than clean-room work on a badly damaged drive. Most reputable labs offer a free or low-cost assessment and a fixed quote before starting, and many charge only if they recover the data you need.

Ask where the work is done, whether they have a clean room, how they protect confidential data, how they return recovered files, and what happens to the original drive afterwards. Be wary of anyone who promises success before examining the drive, or who asks you to try software fixes first.

Privacy and confidentiality

Sending a drive to a lab means handing over everything on it, which may include client files, financial records and staff information. Choose a provider that explains how they handle confidential data, ideally with a written confidentiality agreement and secure return or destruction of the recovered data and the original drive. Under the Privacy Act 2020, you remain responsible for personal information you pass to a third party.

If the drive came from a device involved in a security incident, such as a stolen laptop that was later recovered, tell the lab. It may affect how they handle the drive and what evidence you need to keep. In some cases, a forensic specialist rather than a general recovery lab is the right choice, especially where police or insurers are involved.

Why backups are the real answer

Even when recovery works, it is slow, uncertain and expensive compared with restoring from backup. It can take days or weeks, and some files may come back damaged or missing. A business that relies on recovery labs as its backup plan is gambling with its most valuable information. There is also no certainty about cost until the drive has been assessed, which makes it a poor thing to rely on for budgeting.

Treat a recovery job as a warning. Once you have the data back, put it somewhere protected and fix the gap that caused the problem, whether that was a laptop never added to the backup, a NAS with only RAID protection, or a server with an expired cloud subscription. Then test the fix with a real restore, so the same gap cannot quietly reopen.