Home / Devices / Apple iMac

Apple iMac Data Recovery Leicester

Grey screen and nothing after it. Or a question mark folder flashing in the middle of the display. Or the start-up chime followed by silence where a desktop ought to be. In nearly every case an iMac in that state is still holding the photo library and the paperwork without a byte missing. What travels to Cambridge is the storage from inside it, either a single SATA disk or both halves of a Fusion pair, and the owners are spread across Leicester, Oadby, Loughborough and the studios and small agencies in and around the Cultural Quarter.

Every iMac that arrives here is examined at no charge. The figure quoted afterwards is put in writing and settled before anybody reaches for a screwdriver: £300 + VAT on any one hard drive or SSD, an NVMe blade counted the same.

Logical recoveries carry no fix, no fee. The named exceptions to it are electronic and mechanical failures, chip-level work, DVR jobs and forensic jobs; physical work takes 50% up front. The five bands are set out in full on the data recovery cost page.

// thirty faults, roughly in order of how often they arrive

Thirty ways it goes wrong, and what sits behind each

Tracing a symptom back to the failure underneath it is where the real work begins, and these thirty account for all but a handful of the boxes opened at the Cambridge bench. A fault missing from the list is not an unfamiliar one — describe it on the telephone and you will get a straight view of the odds before you spend anything on postage.

A folder with a question mark, blinking at start-up

The Mac has looked for a bootable system and found nothing to hand over to. That is a missing or damaged boot structure rather than an empty disk, and the photo library behind it is generally untouched. Every restart repeats the same failed read across the same region, so stopping is the useful move.

Frozen on the Apple logo or a plain grey screen

The system has started loading and stalled on something it cannot read. On a spinning disk that means unreadable sectors in the wrong place. On a Fusion pair it frequently means the two halves have lost their relationship. Both are worked from images rather than from the original disks.

A Fusion volume split into two useless halves

Fusion joins a small SSD and a large hard disk into one logical volume, and neither half is readable on its own. If the pair has broken, both drives have to arrive, each one labelled, so the volume can be reassembled from images of the two. Send one and there is nothing to reconstruct.

Beachballing for months and now it will not wake

Long periods of the spinning cursor are usually a disk relocating sectors it can no longer read reliably. That is a warning that runs for months before the failure, and it is exactly the window in which a full image is straightforward. After the failure, the same job takes longer and returns less.

A macOS update that gave up halfway

An interrupted upgrade leaves the system unbootable and the user data untouched. Nothing has been deleted. The files are lifted out of an image of the volume, which sidesteps the update entirely, and it is one of the more common and more cheerful arrivals here.

A tick you can hear through the glass

The actuator resetting because the heads have stopped reading. iMac chassis transmit that sound well and it usually gets attributed to a fan first. Once it starts, the number of further power-ups that improve anything is zero, and each one takes more of the coating away.

The machine will not power on at all

Power supplies and logic boards fail on their own schedule and say nothing about the disk. A dead iMac frequently contains a perfectly healthy drive holding twenty years of photographs. Getting the drive out of one is more work than a tower, but the machine itself never needs to travel.

Storage soldered to the logic board

From the 2017 generation onward, and universally on Apple Silicon, the flash is fixed permanently to the board. That is outside what is done here and there is no route around it. If your iMac has a T2 chip or an M-series processor, the honest answer is no, and it is better heard before the postage.

An APFS container that will not mount

APFS keeps its metadata in a container shared by several volumes, and damage to that container takes all of them out at once. Snapshots and the checkpoint history frequently allow an earlier consistent state to be found, which is one of the few genuine advantages the format has when things go wrong.

Disk Utility offering to erase it

Disk Utility has very few tools and erase is one of the more prominent. It is not a repair. The volume failing to mount says the structures are damaged, not that the contents have gone. Quit, shut the machine down, and let the disk be read at block level.

First aid run repeatedly with no improvement

Repair attempts write to the volume they are repairing, and on a disk with physical damage they spend the reliable reads that are left. Two attempts tell you what one attempt did. Beyond that it is worth stopping, and it is worth saying on the booking form how many were run.

A Time Machine disk that will not restore

Sparse bundles and APFS snapshots are more fragile than the restore interface suggests. A backup reported as corrupt is usually looking at a damaged index rather than at missing data. The files are recovered directly from an image, which avoids the restore process altogether.

FileVault enabled and the password forgotten

FileVault is properly implemented full-disk encryption and it does not yield to effort. What can be found is the recovery key, which is frequently escrowed against an Apple account or written down during setup. Encrypted drive work is 400 pounds + VAT. Where the key is genuinely gone, that is said plainly.

A drive that reads for ten minutes and then stops

A head working cold and failing warm, or a board component drifting with temperature. iMacs run their disks hot at the best of times because of where they are mounted. Imaging in short cooled passes recovers considerably more than one long optimistic attempt.

Files gone after migrating to a new Mac

Migration Assistant occasionally leaves a partial account behind, or copies a profile and then loses the reference to it. Nothing is usually deleted. The old volume gets read and the missing account is lifted from it, which is a good deal simpler than trying to repeat the migration.

A machine reset and handed on to a family member

Erasing and reinstalling writes a new file system across the front of the disk. On a spinning disk the previous contents are largely intact further in. On an SSD, trimming begins immediately and the position is much less encouraging. Which of the two you have decides how urgent the call is.

The SATA cable or the connector has failed

Several iMac generations used a cable that fails before the disk does, and the symptom is a drive that appears intermittently or not at all. It is worth ruling in, because it means the storage is intact. This gets established during the free assessment rather than assumed either way.

A hard disk that has been running since 2011

Original iMac disks are still in service in a surprising number of households. Hour counts in six figures, spare sectors exhausted, and a machine that has been slow for years. There is no drama in these until the day there is, and the sensible response to a machine of that age is a full image while it still cooperates.

A drive that shows in Disk Utility with no volume on it

The disk is answering and the partition map or the container header is damaged. That is a small amount of data at the front of a large disk and it says nothing about the rest. Rebuilding from the structures further in is routine and gives back a mountable volume.

Both halves of a Fusion pair present and the volume still broken

The logical volume group has lost its metadata rather than either disk having failed. Both members get imaged and the group is reconstructed from the copies. This is why the pair must never be separated, relabelled or reformatted individually, however tempting a fresh start looks.

A machine full of photographs and no backup at all

The commonest shape of the phone call rather than a fault. An iMac in a family house is where the photo library lives, and iCloud storage that ran out three years ago is not a backup. It is worth naming plainly, because a recovery is the expensive way of solving something a second disk would have prevented.

Ransomware or a scam that encrypted the volume

Less common on macOS than on Windows but not unknown, and the machine is usually physically healthy afterwards. What comes back depends on the variant and on what was written since. It is priced as ordinary media at 300 pounds + VAT for a single drive, and it is never billed as forensic work.

A creative workstation with an external scratch disk

Video and design work spreads a project across the internal disk and one or more externals, and losing any of them breaks the project. Send everything that was part of it, labelled, because reassembling a project from one volume out of three is guesswork nobody should pay for.

Water down the back of the machine

Corrosion carries on working long after everything looks dry, and the logic board is usually the casualty. The disk sits away from the worst of it in most models. It comes out, gets cleaned if it needs it, and is read normally, which is a far better prospect than the machine itself.

A drive that got very hot after the fan failed

iMacs are quiet machines and a failed fan goes unnoticed for a long time. A disk running well above its rating develops read errors it would not otherwise have, and those errors are permanent even after the fan is replaced. The damage is already recorded on the surface.

An old Mac with a PATA or SCSI disk

Machines from before the SATA era still turn up, usually out of a studio cupboard or a university office. Adapters and period donors are held here permanently. Age on its own is no reason to write a disk off, and a good number of these read in full once their heads are freed.

Recovery software run against the volume for days

Long scans keep a damaged disk powered and working for hours, which is precisely the wrong treatment, and some tools write their own working files onto the volume they are scanning. Say what was run and for how long. It rarely rules anything out and it always changes the order of the work.

A Mac mini with the same faults and a smaller case

The mini uses the same storage arrangements as the iMac of its year, including Fusion pairs, and it is handled identically here. The only real difference is that a mini is small enough that people are tempted to post the whole machine. Send the drive, not the computer.

A drive that was moved to a caddy and now reads as noise

If the volume was encrypted, or the enclosure it came from encrypted in hardware, the bare disk on its own gives back nothing readable. That is not damage. Send the disk together with whatever it came out of, and say clearly what has already been tried.

The machine works perfectly and the owner wants everything off it

No fault, just an old iMac being replaced and nobody quite sure how to get twenty years of files out of it. The drive comes out, gets read, and the contents go back on fresh media. It is the least expensive job on this page and the one most often postponed until something breaks.

A Fusion drive is two disks and one volume

This is the part of the page that costs people the most when it is missed. Fusion joins a small SSD and a large hard disk into one logical volume, and neither half means anything on its own. The SSD holds the most recently used blocks and the disk holds the rest, and the mapping between them lives in metadata spread across both. So when a Fusion iMac stops working, both drives have to travel, each one labelled with which it is. Send one and there is nothing to reconstruct, however healthy that one turns out to be. It also follows that neither half should be reformatted, erased or set up as a standalone volume in an attempt to get the machine usable again, because that destroys the metadata the reconstruction depends on. The pair is treated as one job here rather than two, at £300 + VAT, and the reassembly happens on read-only images of both members rather than on the drives themselves.

What travels, what does not, and where Apple soldered it down

An iMac is a large fragile object built around a small piece of storage, and the screen makes it the worst possible thing to put in a parcel. The drive comes out and the machine stays with you. Getting into one is more work than a tower and it wants a plastic tool and a careful hand rather than force, so if the panel resists, ring before something cracks. That covers every model up to the point where Apple stopped fitting storage that can be removed. From the 2017 generation onward, and universally on Apple Silicon, the flash is soldered to the logic board and there is no route into it here or anywhere else honest. If your machine has a T2 chip or an M-series processor, the answer is no and it is better heard before the postage. Everything on the other side of that line, including the SATA disks, the Fusion pairs and Apple's own blade SSDs, is handled in the ordinary way at ordinary prices, and an encrypted volume with FileVault on it is £400 + VAT rather than £300.

// what stands on the bench

The equipment involved, and why any of it matters

What travels from an iMac is the storage, and once it arrives it goes onto the same benches as everything else in the building. Apple's own file systems and its Fusion arrangement need particular handling, and that is what most of the equipment below is for.

APFS and HFS+ reconstruction

Container headers, checkpoint history, snapshot metadata and catalogue files rebuilt from an image. APFS keeps several volumes inside one container, so damage takes them all out together, and finding an earlier consistent checkpoint is frequently the shortest route back.

Fusion and CoreStorage reassembly

The logical volume group is rebuilt from read-only images of both members. Neither the SSD nor the hard disk means anything on its own, and nothing is ever tested against the original disks, which is why both have to arrive and both have to be labelled.

Filtered air for anything that has to be opened

The 3.5-inch disks in older iMacs are ordinary mechanisms and they get the same treatment as any other: head replacements, stack removals and platter transfers under filtered air with the drive levelled and supported.

Atola and DeepSpar imaging with per-head control

Copies taken one head at a time with retry limits enforced in hardware. iMac disks run hot for years and tend to arrive with weak regions rather than clean failures, which is exactly the case per-sector retry control was built for.

Apple connector and blade adapters

SATA in both sizes, the proprietary blade connectors used between 2010 and 2017, and the thermal sensor arrangements that stop a bare Apple disk from behaving normally on a bench. A drive that will not talk to a generic adapter often talks to the right one.

FileVault handling on the image rather than the disk

Where an encrypted volume is also failing, the imaging happens first with the volume still sealed and the key is applied to the copy afterwards. Typing a password repeatedly into a struggling disk spends the reliable reads it has left and proves nothing.

// badges that arrive in the post

Apple desktops and the storage inside them

iMac 21.5 inch, 2009 onwardiMac 27 inch, 2009 onwardiMac Pro, where storage releasesMac mini, all SATA generationsMac Pro tower and cylinderFusion pairs, SSD plus hard diskSeagate and WD disks inside themApple blade SSDs, 2012 to 2017Third-party SSD upgradesExternal Thunderbolt and USB volumes

What actually comes out of an Apple desktop

Send the drive rather than the machine. An iMac is a large fragile object built around a small piece of storage, and the screen makes it the worst possible thing to put in a parcel. If the machine has a Fusion drive, both halves have to travel and each one needs a label, because the volume cannot be reassembled from one of them and the small SSD on its own reads as meaningless. A single drive or SSD is 300 pounds + VAT and a Fusion pair is treated as one job rather than two. The assessment costs nothing and closes two working days after the parcel is booked in. An encrypted volume, FileVault included, is 400 pounds + VAT. Storage soldered to the logic board, which covers every Apple Silicon machine and the later Intel models with a T2 chip, is outside what can be done here, and that is said before postage rather than after.

// how the media reaches Cambridge

Sending a device — and the three exceptions

The post office does most of the work of getting a job here. A drive that is already unwell travels better boxed and insured than rattling around a car for a day of errands, and something dropped into a Leicestershire postbox this afternoon is generally logged in at Cambridge tomorrow.

The general rule is the drive travels and the machine stays behind — out of the laptop, out of the tower, out of the iMac, out of the recorder under the counter. This bench does not dismantle equipment, and a repair shop will do it while you wait. Three things are the other way round, and getting them wrong costs you the recovery: an external drive stays sealed in its own case, a NAS comes as a complete unit, and a WD My Passport or My Book travels whole with its cable, because on those the encryption key is held on the bridge board rather than on the disk — separate the two and the data becomes unreadable even to us. A Fusion Mac needs both of its drives, each labelled. The one thing nobody can work round is flash soldered onto the mainboard, as on Apple Silicon machines: if it will not come off, there is nothing to post.

  • A stiff box or a well-padded mailer, with enough packing that nothing moves when you shake it. Power supplies, docks and cables can stay at home unless the drive is one of the WD units above.
  • Running a RAID or a server? Send the member disks on their own, not the chassis or the controller, and write the bay order on each one — 1, 2, 3 and so on. Photograph the front of the unit before you pull anything, because that photograph occasionally saves a day of work.
  • Fill in the shipping and booking-in form (PDF) — a name, a number you actually answer, and a line on how the trouble started — and put it in the box.
  • Special Delivery is tracked and insured and is what most people use; your own courier is equally fine. Handing it over in person also works: reception at the Cambridge address takes devices across the counter, Mon–Fri 9:00am–5:30pm. What does not exist is a Leicester counter or anyone who comes to collect.
// write this on the label

Cambridge Data Recovery

Compass House
Vision Park, Chivers Way
Cambridge, CB24 9AD

↓ Print the shipping & booking-in form (PDF)

Address it to Cambridge Data Recovery. It is about seventy miles from Leicester if you fancy driving it — M1 south to Junction 19, then the A14 east — and the lab is two minutes off Junction 32 with parking at the door. Posting costs you a stamp and a day instead. Whichever you choose, you hear from us the moment it is booked in, and the free diagnostic closes two working days after that.

Not certain what belongs in the box? Ring 0800 689 0668 before you tape it up, or let the free online diagnostic ask the questions for you.

// iMac recovery questions

Common questions

£300 + VAT for a single drive or SSD, with a Fusion pair treated as one job rather than two. The assessment costs nothing and closes two working days after the parcel is booked in, and one fixed figure goes to you in writing before work starts. A volume protected by FileVault is £400 + VAT, the encrypted band. Logical faults are covered by no fix, no fee; mechanical work takes half up front.
Both drives, each one labelled. Fusion is a single volume spread across a small SSD and a large hard disk, and neither half is readable alone. Do not erase or reformat either one in an attempt to get the machine working, because that destroys the metadata the volume is rebuilt from. If you can only reach one of the two, ring 0800 689 0668 before going any further.
Then it is outside what can be done here, and that applies to every Apple Silicon machine and to the Intel models from 2017 onward with a T2 chip. There is no laboratory that will tell you otherwise honestly. If your machine is older and the drive comes out, it is worked on normally. Ring and ask before paying for postage if you are not sure which yours is.
No. Erase is not a repair, and a volume that will not mount means the structures are damaged rather than that the files have gone. Quit Disk Utility, shut the machine down properly, and let the storage be read at block level instead. The same goes for running First Aid repeatedly, because each attempt writes to the volume it is trying to repair.
// the rest of the week's work

What else lands on this bench

// where to read further

Pages that take it further

Whenever you are ready, the bench is.

The examination is free, one written figure follows it, and the band covering this page is £300 + VAT on any one hard drive or SSD, an NVMe blade counted the same.