Data Recovery Case File · Portable Drives · Nothing Wiped Anything
Empty After Eleven Years — and Not Erased
Her enquiry told a long story economically. A desktop external drive she has had "for about 11 years, and the connection has been shonky for a long time. Finally the connector gave up the ghost — but before it did, it seemed to just wipe itself. I have taken it apart to get access to the drive with a converter, but there seems to be nothing on it. I am using a Mac and we don't have a PC, but I have read about some sort of issue..." She has read about something real and she is close to it. Nothing wiped itself, and there are two separate reasons the drive looks empty — one of which is caused by the very thing she did to investigate.
| Media | Desktop external hard drive of approximately eleven years' service — long-standing intermittent connector fault progressing to failure; drive removed from enclosure and connected via a third-party adapter, presenting as empty |
| Reported situation | Connection intermittent over an extended period · apparent loss of contents before final failure · connector failed completely · drive removed from its enclosure by the owner · connected directly via an adapter and presenting no data · Mac host only |
| Fault class | Filesystem or partition damage from repeated interrupted power, compounded by enclosure-dependent presentation once shucked — data physically present |
| Equipment used | Original enclosure board retained and tested · sector-size presentation identified · drive read through its own bridge where required · structures reconstructed on a write-blocked image; contents verified by opening |
The decode: why it looks empty, twice over
Reason one — eleven years of interrupted power. A connector that has been intermittent for a long time has been cutting power to a spinning drive, repeatedly, for years. Every one of those interruptions risks catching the filesystem mid-update, and the damage accumulates: directory records left half-written, allocation records disagreeing, a journal describing changes that never completed. Eventually the structures become unreadable, and a computer presented with a volume it cannot parse shows an empty or unrecognised drive. That is what "seemed to wipe itself" actually was — not erasure, but the index becoming unreadable while every file stayed exactly where it was.
Reason two — the thing she did to investigate. Taking the drive out of its enclosure and connecting it through a general-purpose adapter is the natural next step, and on desktop externals of that vintage it introduces its own problem. Enclosure boards differ in the sector size they report to the host, and a volume whose partition structures were written under one presentation cannot be parsed under another — the offsets no longer line up, so the drive appears unpartitioned or blank. Separately, some enclosures perform hardware encryption transparently, in which case a bare drive returns ciphertext that also looks like nothing. Either way, the drive looking empty outside its case is not evidence that it is empty.
Why the Mac detail matters: she mentions having no PC, and it is relevant. A drive formatted for one platform may present as unreadable on another, and macOS declines to mount filesystems it cannot parse rather than showing an error — so a drive that would show as RAW with a format prompt on Windows simply appears blank or absent on a Mac. That is a display philosophy rather than a worse fault, and it can make a recoverable drive look like a lost cause.
What she must not do: the drive now looks empty on a Mac, and Disk Utility will offer to erase it — presented as the way to make it usable. That would write a fresh structure over the one that needs rebuilding. Nothing should be erased, initialised, repaired or reformatted.
What to keep: the original enclosure and its board, which she has already removed. That board may hold the encryption key and it certainly determines the sector presentation the volume was built for, so it is the most important object in the case after the drive itself.
On the bench
The original enclosure board was retained and tested rather than set aside, since on drives of this kind it may hold the encryption and it determines how the volume is presented. The sector-size presentation was identified and compared against the layout the partition structures assumed — the difference that makes a healthy drive appear unpartitioned. The drive was read through its own bridge where that proved necessary, and the accumulated filesystem damage from years of interrupted power was reconstructed on a write-blocked image rather than on the drive. Contents were verified by opening.
The outcome
The presentation issue resolved through the original bridge, the accumulated structure damage rebuilt on a write-blocked image and the contents verified and delivered. Free assessment, one fixed written figure including VAT, no recovery, no fee. The decode, for anyone whose drive appears to have wiped itself: it did not — years of an intermittent connector means repeated power loss to a spinning drive, which damages the records describing where files are while leaving every file in place, and a computer that cannot parse those records shows an empty drive; and taking a drive out of its enclosure can make it look blank for a second reason entirely, because enclosure boards differ in the sector size they report and some encrypt transparently. Keep the original case and board, and never accept an offer to erase.
Drive that appears to have emptied itself
It hasn't erased anything — and don't accept any offer to erase or initialise it now. Two things make a drive look blank when it isn't. First, a connector that's been intermittent for years has been cutting power to a spinning drive over and over, and each interruption risks catching the filing structures mid-update; eventually those records become unreadable, and a computer that can't parse them shows you an empty drive while every file sits exactly where it was. Second, if you've taken the drive out of its case and connected it directly, that alone can make it appear unpartitioned: enclosure boards differ in the sector size they report, and some encrypt transparently, so a bare drive can return something that looks like nothing. Keep the original enclosure and its board — on both counts it may be the way back in.
Nothing wiped it — call Newcastle Data Recovery on 0191 406 1051; original bridge tested and used, presentation identified, structures rebuilt on a write-blocked copy.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.