Data Recovery Case File · Formatted & Logical Faults · The Empty Folder

Files Gone but the Folder Remains: What Happened

His enquiry was a working photographer's bad morning, described with the detail that makes it solvable. Coming to finish editing a client shoot: "in place of the photos, my cataloguing software said 'file cannot be found'. It's now not even saying that — there's just nothing in there. I've checked both the capture folder on my computer and my external SSD and they're nowhere to be seen. I don't think I've accidentally deleted them, as the folder and session where they were is still there, just with nothing in it. The rest of the files on my hard drive are all fine." That last observation and the surviving-but-empty folder are the two that matter. A folder that still exists while its contents have vanished is not what deletion looks like — deleting a shoot removes the folder too. This points somewhere else, and there is a free place to look before any recovery is commissioned.

The decode: what an empty surviving folder means, and where to look first

Why the surviving folder is diagnostic: when someone deletes a shoot, the folder goes with it. When a folder remains and its contents do not, what has been lost is the directory entries inside it — the records naming each file and pointing at where its data lives. The folder itself is a separate entry one level up, and it survived. That pattern arises from an interrupted write to that directory, from localised structure damage, or from software that moved or relinked the files and did not complete. Crucially, losing an entry does not remove the image data: the photographs remain physically written where they were, unnamed and unlisted.

Why "the rest of the drive is fine" is good news: it means the damage is localised rather than a failing volume. A drive losing structures wholesale produces widespread symptoms; his are confined to one session's directory. That points at an event rather than a decline, and events are more recoverable than declines.

The free place to look first: and for a photographer this is the one that most often ends the problem at no cost. Two things are worth checking before commissioning anything. First, the camera cards: if the shoot has not yet been reused or reformatted, the originals may simply still be on them — an ingest that appeared to complete does not always mean files reached their destination intact, and an interrupted import can leave a session folder created and populated with references to files that never landed. Second, the application's session and catalogue files, which record the original paths every image was imported from; those paths say exactly where the software expected the files to be, which frequently reveals that they went somewhere other than where he has been looking, or were moved by a sync client.

Why the urgency is real, and specific to his hardware: the images are on an external SSD, and solid-state storage clears blocks the operating system has marked as free during background housekeeping, within minutes. So unlike a hard drive, where deleted content persists until overwritten, the window here closes on its own. Both devices should stop being used immediately — not shut down and restarted, simply left alone — because ordinary use runs the housekeeping that removes what a recovery would find.

On the bench

The free avenues were exhausted first, because a shoot recovered from the original cards costs nothing and beats any bench result: the camera cards checked for surviving originals, and the application's session and catalogue files read to establish the exact paths every image had been imported from — which establishes where the files actually went rather than where they were expected to be. Both volumes were then imaged write-blocked on the Atola TaskForce 2, freezing them as of the moment he stopped. On the images, the lost directory entries were reconstructed where they survived, and format-aware carving recovered the images by their own signatures where they did not. Every photograph was validated by rendering at full resolution and delivered ordered by embedded capture time.

The outcome

The originals traced, the directory reconstructed and the shoot recovered and validated at full resolution. Free assessment, one fixed written figure including VAT; where a drive has to be opened or a chip removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone whose files have vanished from a folder that is still there: that pattern is not deletion, because deleting takes the folder too — it is loss of the directory entries inside it, and the image data remains physically present; the rest of the drive being unaffected means the damage is localised, which is the better case; check your camera cards and your software's recorded import paths before commissioning anything, because the originals are often still somewhere; and if the storage is solid-state, stop using it now, because background housekeeping clears freed blocks within minutes.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.