Open, and taking cases in · 9am–5:30pm, weekdays In a hurry? Call 0800 6890668
CDR Cardiff Data Recovery 0800 6890668 Book it in
CDR / The things we recover / Macs and MacBooks

Devices · Mac and MacBook

Cardiff Mac and MacBook recovery. Encrypted, soldered, split — the files still come back.

A Mac puts up three obstacles a Windows box does not. The volume is already encrypted when you unbox it. The flash is soldered to the board on most models. On a Fusion machine, one volume sits across two separate disks. Consumer software stops dead at the first of those. Send it in from Cardiff or anywhere in South Wales, tell us the password, and the rest is bench work.

No files back, no fee on most jobs One fixed price, after a free diagnosis It comes to us by post from Barry, Pontypridd or Newport

Describe the symptoms to an engineer
0800 6890668

This comes in most weeks — routine work for the bench.

Nothing matching? Try the triage →
Posting it to us: post it tracked and fully insured to the intake lab, and the journey back is on us; ring first if you would like an engineer to check how it is packed before you seal the box. Every stage is set out on the posting guide.

The makes that arrive most often.

Macs with a removable diskPre-2016 machines: iMacs and MacBooks running 2.5" SATA disks or Apple's blade SSDs. Both are routine work.
PERC controllersOn iMacs and Mac minis built between 2012 and 2020: one volume stretched across an SSD and a hard disk together. Separate them and neither one tells you much.
Intel Macs, T2 chipIntel models from 2018 to 2020: the flash is soldered down and a T2 chip encrypts everything in hardware.
Apple siliconM1 through M5: flash mounted on the logic board, keys sealed inside the SoC.

Decoding the Mac error messages.

Not seeing yours? →
What shows upWhat has gone wrongDo this now
A folder with a question mark, blinkingThe Mac can find no startup disk at allDo not restart it — test the disk
At start-up, a circle with a slash through itmacOS is present but refuses to loadCheck the disk, then the container
First Aid reports errors and stops thereAPFS damage past Disk Utility's reachTake an image, then decide
com.apple.DiskManagement.disenter error -119930868The APFS volume refuses to mountNearly always recoverable off a clone
In Disk Utility: File system verify or repair failed (-69845)macOS has run out of optionsPower it down and stop
Looping at boot ever since a macOS updateFirmware or container harm; the data below is fineNormally recoverable

From the parcel to your files coming back.

Cases we have logged →
01

A case number, and a diagnosis at no cost Free

The diagnosis costs you nothing. Every item that arrives is logged under a case number of its own, and an engineer works out what has actually failed — then tells you plainly which files can come back and which cannot. The price follows that: one fixed figure, in writing, and no work begins until you have read it and said go ahead.

Diagnosis at no chargeOne fixed figure in writingNothing owed yet
02

Start with the password

FileVault, a T2 chip, the Secure Enclave on Apple silicon — whichever one holds the key, what sits beneath it is ciphertext and nothing else. Give us the password and the job turns ordinary. It opens with an image made so that it can still be decrypted later.

Password first of allAn image that still decrypts
03

Storage you cannot lift out

If the disk comes out, it gets imaged like any other. Where the flash is soldered, or the board itself has died, the job moves down to component level. Those memory chips carry on reading long after the Mac has given up starting.

Component-level readingIncluding soldered flash
04

Both halves, joined back up

On a Fusion iMac, the front half of a document can sit on the SSD and the back half on the hard disk. We image each one, then work out the CoreStorage or APFS layout that ties them together. What goes home with you is finished files, not the halves they were kept in.

Each half imagedThe Fusion map put back
05

You approve it, then it goes back

Nothing is billed while you are still deciding. A complete listing of what came off the drive reaches you first, and the invoice only follows your yes. Files travel back on media bought new for the job, return postage ours, and we do not close it here until every one of them opens on the machine you will use.

The file list is yours to approveBack on media bought newThe postage back is on us

What we usually find first

  • On a T2 or M-series Mac the key lives inside the processor — wreck that logic board badly enough and the flash comes back as noise, in this lab and in every other one. That is the plain reason a modern Mac wants backing up harder than anything you owned before it.
  • Fusion presents two disks as one volume — a single file can lie across both, so removing one of the pair leaves you with broken documents. The two go on the bench together and the map is put back the way it was.
  • The FileVault password travels with the machine — write it on the form, or give us the recovery key in its place. Image a locked volume without either one, and all you have is a spotless copy of noise.
  • A repair counter mends hardware; data is another trade entirely — 'unrecoverable' there tends to mean a replacement board turning up empty. Ask whether the storage itself can be read and you get a different answer.

On the numbers: Apple publishes no model-by-model figures, and soldered Mac flash never turns up in a public failure study, Backblaze's included. Any site handing you a firm 'MacBook failure rate' invented it. That data exists nowhere outside Apple.

Straight out of the casebook.

CF · CDF-2026-0770LOGGED ✓

An iMac Fusion Drive that failed over two weeks

The verdict from the Apple Store was that the iMac was beyond help. What sat inside was a Fusion Drive: an SSD and a spinning disk that the Mac shows you as a single volume. The spinning half was failing. Both were imaged separately, the mapping that ties them together was rebuilt, and a design studio got a decade of its files back.

98% came back5 days after arrival

Before you send it off.

Start with these

  • Send the login password with the Mac
  • Shut a spilled-on Mac down at once
  • Both Fusion disks, each one labelled
  • Name the macOS version it was on

What to avoid

  • A second First Aid pass on a dying disk
  • Powering up a Mac that has had a spill
  • Wiping it to trust a backup no one checked
  • Assuming an M-series Mac is beyond help

What we get asked, week in, week out.

Is my Mac password needed?

Yes, it is. FileVault, the T2 chip and the Secure Enclave on an M-series machine all encrypt the volume, and only your login password or the recovery key will undo that. Without one of the two, nobody reads the contents — no lab anywhere, this one included.

Apple said nothing could be recovered. Is that final?

Rarely. You put a recovery question to a repair service, and they answered as repairers. Their fix is a new logic board, and the old one leaves the building with your files still on it. Reading that storage is a different trade, done on a different bench.

Why is a Fusion Drive such awkward work?

The single icon in the Finder is bookkeeping, not hardware. Underneath sit two disks — a small SSD and a slower hard disk — and one file can hold blocks on both. Bring us half the pair and you get fragments. We copy the two, then rebuild the map that joins them.

My MacBook's flash is soldered down. Can that still be read?

Usually, yes — it becomes board-level work. Given the password, and an encryption chain that has not been broken, those chips can be read where they sit. What does not work is lifting the flash off the board and trying to read it on its own.

An unplugged drive keeps whatever it still holds.

A failing drive has only so many starts left in it. Spend none of them. Keep the power off, and the free diagnosis will tell you what is still readable.

0800 6890668