Data Recovery Case File · Electrical & Environmental Damage · The Board Corrodes, the Storage Doesn't

Water Damaged MacBook: the Board Corrodes, the Storage Doesn't

His enquiry was two sentences with a diagnosis already in them. "My MacBook Air has broken due to water damage. This corroded the logic board. I now want to extract all the files from the internal hard drive." The diagnosis he has been given is a board diagnosis — and this page's central point is that a corroded board is not a verdict on the storage. Corrosion is a disease of exposed circuitry: it attacks the traces, pads and component legs that liquid can reach and dwell on, and the storage in a laptop is one of the less exposed things in it. So the question is not whether the files survived the corrosion — they very probably did — but which of two quite different routes applies to getting them out, and that depends entirely on the machine's generation.

The decode: what corrosion attacks, and the fork that decides everything

Why corrosion is a board disease: liquid entering a laptop finds the exposed, powered circuitry first, and what it damages is what it can sit on — the fine traces running across the board, the pads under components, the legs of connectors and the power-delivery parts that carry the most current. Two things then happen. Immediately, liquid bridges circuits and current flows where it should not, which is what kills the machine. Slowly and far more destructively, residues keep corroding those same features for as long as they remain, eating copper and lifting pads long after everything feels dry. Storage, by contrast, is either a sealed module on a connector or a set of packages under shielding, and it is rarely where the liquid pools. That is why a machine with a written-off board so often has entirely intact data.

The fork that decides the route: MacBook Airs span two very different worlds, and identifying which is the assessment's first job rather than something to assume. Earlier machines carry a removable blade SSD on a proprietary connector: it lifts out of the corroded machine, is brought up on a generation-matched interface, and is imaged directly — the dead board becomes irrelevant, and this is the straightforward case. Later machines integrate the storage into the board itself and encrypt it with keys held in a security chip on that board, which means there is nothing to remove and nothing to read elsewhere. Recovery there means cleaning the corrosion and repairing the power path until the machine can run and unlock its own storage — specialist work with honest variability, offered as a staged assessment with findings in writing.

Why time matters in both cases: more in the second than the first, but in both. Corrosion is progressive, so the longer a damaged board sits, the less likely it is to be revivable — and on integrated machines, revivable is the whole route. Even on removable-module machines, corrosion spreading toward the storage connector is a real risk. The practical instruction is the same as every liquid case in this archive: do not try to power it, do not charge it, do not apply heat to dry it, and get it looked at sooner rather than when convenient.

And his phrase, gently corrected: he asked to extract files from "the internal hard drive". There is no hard drive in a machine of this kind — it is flash storage, either as a module or soldered — which matters only because it changes what to expect: no platters, no donor heads, no mechanical service, and either a module read on the right interface or board-level work on the machine itself.

On the bench

The generation was established before any route was committed to, since it decides everything else. Where the machine's era provided a removable blade module, it was lifted out of the corroded chassis and brought up on a generation-matched proprietary interface through the Atola Insight Forensic's Apple support, then imaged completely in that first session — the damaged board taking no further part. Where storage proved integrated, the board was assessed with corrosion mapped and findings written down first, then cleaned and its power path restored at micro level until the machine would run and unlock its own storage, with imaging following immediately on the restored path. Either way the contents were verified by opening and delivered on fresh media.

The outcome

The generation established, the corresponding route followed, and the files imaged, verified and delivered. Free assessment, one fixed written figure including VAT; where a drive has to be opened or a chip removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone told their logic board is corroded: that is a diagnosis of the board, not of your data — corrosion attacks exposed traces, pads and component legs, and storage is rarely where liquid pools; what decides the route is the machine's generation, because earlier models yield a removable module that reads elsewhere while later ones integrate and encrypt storage, making board repair the only road; and in both cases corrosion keeps working while the machine sits, so the delay before assessment is one of the few things still in your hands.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.