Data Recovery Case File · Solid State & Flash · Corrupted, or Just Unreadable Here?

SSD Reports as Corrupted on a New PC: Or Just Unreadable Here?

His enquiry described a moment of alarm that may have a much less alarming explanation. "Tried to connect an SSD containing all my pictures to a new PC and it came up as corrupted. Tried to recover but still cannot open up the files. Can you help?" Two details deserve attention before any recovery work is contemplated. The drive was moved to a different computer, which is the specific circumstance in which a perfectly healthy drive can be declared unreadable — and the reason is not damage at all. And he has already attempted a recovery whose output will not open, which is itself informative. The question to settle before anything else, and it costs nothing: was that drive encrypted on the machine it came from? Because if it was, nothing is corrupted, nothing needs recovering, and what he needs is a key rather than a laboratory.

The decode: why a new PC changes everything, and what unopenable output proves

Why a different computer is the key circumstance: modern Windows machines frequently encrypt their drives by default, and many owners never know it happened — there is no ceremony, no password to invent, because the protection is tied to the account and the machine. Move such a drive to a different computer and the new machine cannot read it, because it does not hold the key. What it reports varies: sometimes a prompt for a recovery key, but frequently something much less helpful — that the drive needs formatting, that it is not accessible, or simply that it is corrupted. That last word is the operating system's way of saying it found data it could not interpret, and encrypted data is precisely that. So the alarming message may describe an entirely healthy drive doing exactly what it was designed to do.

What his failed recovery attempt tells us: a useful corroboration. Recovery software run against an encrypted volume behaves in a very particular way: it scans the whole drive, finds no recognisable filesystem, and either returns nothing or carves out large numbers of files that have plausible sizes and will not open — because what it is carving is ciphertext. Recovered files that will not open is therefore consistent with encryption rather than with damage, where you would typically expect a mixture of intact and broken files rather than uniformly unopenable ones.

What to do about it, in order: the encryption question is settled by examining the drive's own structures, which takes minutes and requires no recovery work. If it is encrypted, the answer is his recovery key, and it will be in one of a few places: the account he signed into on the original machine, a printout or file saved when protection was enabled, or an organisation's IT if the machine was ever managed. With that key the drive opens and his pictures are simply there. Without it, and this is the honest limit this archive states in every encryption case, the data is unrecoverable — no laboratory defeats it, and one that claims to is misleading him.

And if it is genuinely damaged: the other branch remains ordinary. Filesystem damage on a healthy SSD is reconstructed from a write-blocked image, and photographs recover well. But that work should only begin once the cheaper question has been answered, because doing it in the wrong order means paying for a recovery that a key would have made unnecessary.

On the bench

The encryption question came first and cost nothing: the drive's own structures examined to establish whether the volume was protected, which distinguishes ciphertext from damage definitively rather than by inference. The drive was imaged write-blocked on the Atola TaskForce 2 so that everything afterwards happened against a copy. Where protection proved active, decryption ran against his own lawfully-held credential through Passware Kit Forensic — the only kind of key this bench turns — and the photographs appeared intact behind it. Where the damage proved genuine, the filesystem was reconstructed on the image instead. Either way the pictures were validated by rendering before delivery on fresh media.

The outcome

The encryption question settled before any recovery was undertaken, the drive imaged, and the photographs validated and delivered. Free assessment, one fixed written figure including VAT; where a drive has to be opened or a chip removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone whose drive is called corrupted on a new machine: modern Windows encrypts drives by default and the owner often never knows, so moving one to a different computer produces a drive the new machine genuinely cannot read — and "corrupted" is frequently how that gets reported; recovery software run against an encrypted volume returns files that will not open, which is a signature of encryption rather than damage; and the fix in that case is your recovery key from the original account, not a laboratory.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.