In 2015 engineering teams observed a noticeable increase in the number of Data Recovery requests on Macs and all encrypted Apple devices . Companies and individuals have quickly taken advantage of the security provided by encryption, in response to the growing threat of data theft or hacking .
We then realized that traditional recovery methods are ineffective on encrypted hard drives, unless a decryption operation has taken place beforehand. Fortunately, our engineers have extensive expertise in Apple’s storage technologies, and are able to decrypt devices before proceeding with recovery attempts, to avoid any risk of damage and additional data loss.
During a recent project, we were approached by an Apple laptop owner, who had tried to update to the new OSX. Following a failure in the middle of the operation, his hard drive became completely inaccessible afterwards.
Once the computer arrived in our lab, we were able to image 99% of the disc in the clean room. We observed that the drive contained Apple Core Storage as well as Apple’s new Logical Volume Manager. To rebuild the file system, we needed to decrypt the hard disk , which had been encrypted by Fire-Vault 2. During the process, we discovered that the disk contained numerous errors. Fortunately, we were able to overcome them to access the Apple Core storage level and thus decrypt the disk.
Once decrypted, we performed Mac hard drive recovery on the HFS file system and managed to recover the user’s data, ensuring that the computer was stable and ready to use again.
Although Mac hard drive data recovery requests are becoming more common, they can vary in complexity. Our advanced capabilities really come into play when we are asked for assistance with formatted and deleted Apple hard drives, which need to be decrypted using special tools.
We’ve gone one step further by announcing increased capabilities for data recovery from Fusion drives and Apple’s encrypted devices. This means that we can perform recoveries on all Apple discs on the market. To achieve such a level, our team has developed bespoke tools to reverse engineer Apple drives, including Fusion drives, consisting of SSDs and HDDs.
We believe that the growing influx of Fusion drives on the market will continue to cause significant problems with basic data recovery, as these new drives operate differently from older Mac hard drives , which are easier to recover from. perform a recovery. To successfully recover Linkedin data from Fusion drives, both components (SSD and HDD) must be functional, requiring the deployment of an even higher level of skill and expertise.
As device infrastructure is constantly changing, users are advised to research and seek advice before attempting to repair their devices . Disks are often fragile, and older recovery methods could permanently damage newer devices. Ideally, seek help from an expert – no matter what technology you use.