Drive detected, files unreadable, or corruption suspected

Use this flow when storage still appears in BIOS or Windows but files fail to open, read errors repeat, or a SMART warning appears. The first goal is to preserve recoverability.

Category: Storage and data accessPlaybook: PB-STORAGE-001Triage: stop and preserve
Stop before repair: stop writes and do not run repair, dismount, initialize, format, delete, or recovery actions until a separate backup or approved imaging plan is confirmed.

What this flow is for

The drive is detected but files are unreadable, read errors repeat, or corruption/SMART symptoms appear. Logical corruption, physical failure, permissions, and encryption can look similar.

First safe checks

  • Identify the drive, data importance, interface, OS, and affected file scope.
  • Record errors, event IDs, SMART warnings, temperature, disconnects, and recent changes without writing.
  • Verify whether an independent backup opens before attempting repair.
  • Use only an approved read-only health or file-system scan, saving output elsewhere.
  • Stop for clicking, heat, disappearing hardware, encryption/key issues, or irreplaceable data.

Capture this without private data

Drive health

Model/interface and redacted read-only SMART or health result.

Error scope

Exact error, event IDs, affected files, and recent power/cable/software changes.

Backup proof

Backup age and a representative-file test, without uploading private contents.

Most likely problem buckets

Logical corruption

File-system or metadata errors affect access while hardware remains visible.

Physical failure

Media, controller, cable, power, or enclosure faults cause repeated I/O errors.

SMART warning

A drive can appear usable while warning of near-term failure.

Access or encryption

Permissions, encryption, or a missing recovery key may block access without damaged files.

Take one step at a time

ACT-STORAGE-001

Stop writes and record symptoms without modifying the affected volume.

ACT-STORAGE-002

Verify a separate backup opens and identify the most important readable files.

ACT-STORAGE-003

Use only an approved read-only scan and save results separately.

ACT-STORAGE-004

Hand off imaging, recovery, encryption/key, physical-failure, or repair work.

Best follow-up ask

Is the data still readable, and does an independent backup exist and open successfully?

When to stop and hand off

Escalate before write-changing repair or recovery when there is no verified backup, physical-failure evidence, encryption/key risk, or irreplaceable data.

Reviewed against storage safety guidance

This flow uses Microsoft guidance for read-only scans and repair-command boundaries, CISA backup guidance, and Seagate SMART guidance. It does not promise recovery or instruct users to overwrite the affected drive.

Prepare a technician handoff

Record the device, symptoms, backup status, and redacted evidence privately.

Open private discovery

Continue in support chat

The support assistant can keep the case in preservation mode without collecting file contents or keys.

Open support chat