Data Recovery Case File · Portable Drives · The Slight Rattle

The rattle outranks everything: a failing backup drive's farewell decoded — the shake test gently retired, the source machine brought into the plan, and the estate recovered by the quiet route

Her report moved in the right order and ended on the detail that mattered most. A 1TB external, serving as the backup drive for her 2009 MacBook Pro: yesterday, the message — "Mac OS cannot repair the external hard drive." Then a strange twilight: "for a few hours it was still possible to read (but not write to) the drive — but now the Mac does not even recognise it." Then the honest uncertainty: "as far as I know the hard drive has not been dropped" — and the small, decisive observation — "though it rattles slightly when shaken." She asked for a quote, and for the reply by email, phone being difficult at work — honoured, of course, as such requests always are. The decode below takes her observations in reverse order of how she offered them, because the last one leads: on a hard drive, a rattle, however slight, is never furniture noise. Something inside is loose that was built to be fixed — and from that fact, everything else on the page follows.

The decode: the rattle, the twilight hours, and what "backup" changes

The rattle, taken seriously: everything inside a hard drive is fastened, balanced or parked; nothing healthy moves freely enough to sound. A slight rattle means a component adrift in the chamber — and a loose object in a space where heads fly closer to surfaces than a fingerprint's height is a hazard that worsens with every movement, powered or not. Two consequences follow immediately. First, the shake test — everyone's instinct, hers included — retires from service the moment it returns a positive: each further shake sends the stray part skating across territory it must not touch. Second, the drive travels and rests flat and still from that point on, and it is never powered again outside the laminar flow bench, where the chamber can be opened, the wanderer identified and removed, and the surfaces read for whatever passage it made. Her mentioning the rattle at all — a detail many would omit as trivial — set the entire handling protocol before the drive arrived. It was the most valuable sentence in the enquiry.

The twilight, explained: the sequence — repair refused, then read-only hours, then nothing — is a mechanism failing in stages. The system's repair refusal was its honest report that the volume's bookkeeping no longer answered cleanly; the read-only interlude was the drive still serving what it could while declining the writes it could no longer guarantee; the final silence was the start-up exam failing outright. Those few read-only hours were, in retrospect, the drive's farewell window — and if anything was copied out during them, it was well taken.

The word "backup," acted on: her drive's job title reshaped triage in a way worth recording for every reader. A failed backup drive may have a living twin: the source machine it mirrored. So the plan ran on two rails — recover the drive, and reconcile the result against the MacBook's current contents, so that the final delivery closed every gap between what the laptop still held and what only the backup had kept. When the safety copy fails, the original is suddenly a sole copy; the reconciliation is what returns the household to two.

The recovery: opened first, imaged second, reconciled last

Under the laminar flow bench, the rattle gave up its source — a component adrift exactly as the sound had promised — removed, with the platter surfaces inspected and found to have escaped its travels. The mechanism was serviced, and the drive went to hardware imagers for one gentle, complete pass; the volume rose from the image with its bookkeeping repaired on the copy. The estate was then reconciled against the source machine's live data, and the combined, de-duplicated whole verified — nothing left existing in one place only.

The outcome

The backup's contents delivered on new media, the reconciliation report alongside — every file accounted for on at least two shores again. All correspondence ran by email, as asked, from first assessment to the final manifest: free assessment, one fixed written figure including VAT, 50% of parts and labour upfront with the balance only on success. The retired drive left with one instruction on its label, useful to every reader with a suspect device in hand: do not shake.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.