FAQ
The specialists answer to you
FAQ
Feel free to contact us to ask some questions or share a comment.
Recovering deleted files on a tablet follows the same principle as on a smartphone: deleted data is not immediately physically overwritten; it remains accessible until the space is reused.
For an Android tablet, if USB debugging is enabled or if the tablet is still functional, our professional tools can extract the complete memory image and reconstruct the deleted files. Without USB debugging or root access, extraction may require hardware intervention (ISP or chip-off).
For an iPad, recovery without an iCloud backup is more difficult due to the default AES 256-bit encryption. If you know your PIN code, extracting deleted files is still possible within a timeframe of a few hours to a few days depending on the model.
Modern ransomware primarily targets backups to maximize pressure on victims. Here's how to identify if your backups are compromised:
- Network backups (NAS, backup server): check the file extension — an unknown or added extension (.locked, .encrypted, etc.) indicates an infection. Also, check the metadata (recent and unusual modification date).
- Synchronized cloud backups: if the synchronization client (OneDrive, Dropbox, etc.) was active during the attack, the encrypted files have probably replaced the originals. Check the version history before restoring.
- Offline backups (disconnected external drive, LTO tape): if they were not connected to the network during the attack, they are generally intact.
The 3-2-1 rule (3 copies, 2 different media, 1 offsite) with at least one air-gapped copy is the most effective protection against ransomware.
Formatting a hard drive is an operation that erases the logical structure of a storage medium, making the data inaccessible without physically deleting it immediately. Whether due to inadvertence or a system prompt, a formatted hard drive represents a software-type problem: your data is no longer visible, but it can still be recovered if you act quickly and correctly.
According to data recovery experts, more than 90% of data lost after accidental formatting is recoverable, provided that no new writing has occurred on the disk since the incident.
Yes, this is one of the most frequent cases. Our fleet of drives covers all DLT formats, even the oldest ones. We read and extract your data without you needing any hardware.
After reinstalling your operating system (OS), you find that you no longer have access to your data stored on your hard drive. This problem frequently occurs during an OS reinstallation and is in most cases related to a modification of the hard drive's partition table — a software cause, not a hardware one.
A faulty CD/DVD can present two types of failure: physical (scratches, deposits, delamination) or software (data corruption, burning error). In both cases, any non-professional handling increases the risk of permanent data loss. According to our data recovery specialists, each attempt at amateur repair reduces the chances of subsequent recovery by a professional by 30 to 60%.
When your USB drive is no longer functional, two types of failures are possible: physical (broken connector, damaged component) or software (corrupted file system, bad sectors). In both cases, each additional manipulation increases the risk of permanently damaging the electronic components and losing your data irretrievably. Entrust your drive to a data recovery specialist at the first signs of malfunction.
A failing hard drive is a mechanical storage device whose internal components, platters, read/write heads, and motor, are compromised to the point of no longer guaranteeing reliable access to data. As a general rule, each additional rotation of a damaged drive irreversibly worsens the damage (domino effect). The read/write heads fly over the platters at a height of 5 to 10 nanometers, which is about 1,000 times less than the thickness of a human hair, meaning that the slightest shock or particle of dust can permanently scratch the magnetic surface and make data recovery impossible.
A defective SSD is a Solid-State Drive that has a physical failure (damaged electronic components) or software failure (corruption of the firmware or file system), making data access impossible or unstable. Any incorrect handling increases the risk of permanent data loss.
When your SSD is no longer functional, do not attempt to repair it yourself. Each uncontrolled intervention increases the likelihood of damaging the electronic components and losing your data irretrievably.
Actions to never perform on a defective SSD:
- Do not open it — Opening the case exposes the NAND chips and the controller to electrostatic discharge and dust, making any subsequent recovery impossible.
- Do not format it — Formatting overwrites the allocation tables and metadata; your files would be permanently and irrecoverably lost.
- Do not hit it — Unlike mechanical hard drives, SSDs do not contain any moving parts; a physical shock directly damages the flash memory chips.
- Do not perform repeated power on/off cycles — Successive power-ups can cause surges and worsen an existing electronic failure.
Our data recovery services are primarily available in Switzerland, France, Belgium, and Germany. These four countries constitute our main area of operation, with local teams and optimized response times. We also handle data recovery requests from around the world, without geographical restrictions.
SOS Data Recovery is a direct partner with La Mobilière and Helvetia. For other companies (Allianz, AXA, Bâloise, Generali, Vaudoise, Zurich), we handle the necessary steps and provide the required documentation for reimbursement.
Yes. SOS Data Recovery (Tesweb SA) is a Swiss company founded in 2006, registered in the commercial register of the Canton of Bern and based in Ins (Anet). It is CyberSafe certified and a CyberSafe partner (label awarded by the cyber-safe.ch association after an audit) and complies with the new Federal Data Protection Act (nLPD, RS 235.1). More than 8,000 customers and 779 IT partners trust it. The independent platform Avis Vérifiés (SKEEPERS group, NF Service certified) lists more than 249 reviews with an average rating of 4.5 out of 5.
It depends on the type of storage and how the reinstallation was performed.
On a HDD (mechanical hard drive): if the disk was formatted without "secure erasure" (simple deletion of partitions), the encrypted files are often still physically present on the magnetic platters. A laboratory extraction can allow us to recover the encrypted files, which our experts will then attempt to decrypt.
On an SSD: the situation is more complex. The SSD firmware may trigger a TRIM operation automatically after formatting, permanently erasing the data. On some models or if TRIM has been disabled, partial recovery is still possible.
In both cases, the faster you act after the reinstallation, the higher the chances of recovery.
Yes. Drop-off at a partner location is completely free. Secure packaging and transport to our laboratory are handled by SOS Data Recovery. You only pay if you accept the data recovery quote.
Confidentiality is a fundamental principle of our forensic practice. We apply strict rules:
- Restricted access — only the technicians in charge of the case have access to the data. Each access is logged.
- Confidentiality agreement — an NDA (non-disclosure agreement) can be signed on request before any intervention
- Secure destruction — after submitting the report and with the client's agreement, the working copies are destroyed by certified secure erasure
- Hosting in Switzerland — all data remains in our laboratory in Ins (BE), subject to Swiss data protection law (LPD)
- CyberSafe Certification — our security practices are audited and certified by the CyberSafe label recognized by the Swiss Confederation