Blog — Data Recovery and Cybersecurity
Technical analyses, prevention tips and data recovery news from the experts at SOS Data Recovery, Swiss laboratory since 2006.
Data Recovery After a Fire: What Heat Really Destroys (and What Survives)
A hard drive pulled from a fire is not necessarily lost, far from it. Counterintuitively, the chances of recovery after a fire are often good, especially for hard drives: the storage device is rarely exposed bare to the flames, and the equipment housing it, sometimes even as it melts, acts as a shield. If you have retrieved a blackened drive, covered in soot or trapped in a molten mass, do not plug it back in and do not open it: keep it as is and take it quickly to a laboratory.
What follows explains why data withstands more than people think, what heat, smoke and firefighters' water actually destroy, and at what point a device truly becomes unrecoverable.
Why data often survives: the paradox of the melted shell
The first reflex, faced with a charred computer, is to think it dead. That overlooks the fact that the hard drive itself is almost always protected by what surrounds it.
A storage device is never sitting bare on a table at the moment of a disaster. It lives in an external USB enclosure, in a laptop, or in an office tower. And that container changes everything. A desktop tower is almost always made of metal: it offers real protection against fire, and the drive inside can pass through a serious blaze without being directly affected.
The laptop case is more surprising. Its shell is not made of metal, so it melts. But a computer that melts under the thermal radiation of a fire, without burning in the flames themselves, produces an unexpected effect: the molten material clumps around the hard drive and encases it. This crust of cooled plastic and components forms a layer of protection. It partly insulates the drive from the heat, but also, and this is precious, from the extinguishing water and the ambient humidity that accompany any fire. The drive comes out coated and unrecognizable, and yet its core has often been preserved.
That is why a hard drive that has been through a major fire is not a lost cause from the outset. It simply needs to be entrusted to someone who knows how to free it without damaging it further.
The three forms of damage from a fire
A fire does not attack a storage device in a single way, but in three.
| Damage | What it does | Consequence |
|---|---|---|
| Heat | Degrades electronics, heads, then platters | Recoverable while moderate or the drive protected; irreversible beyond that |
| Soot and smoke | Toxic, acidic, abrasive deposits | Corrosion and abrasion of the electronics and internal surfaces |
| Water and extinguishing agents | Flooding, foam, firefighters' powder | Corrosion, like a flood, often combined with thermal damage |
First there is heat, the most obvious. As long as it stays moderate or the drive is protected by its enclosure, the interior can get through. Beyond a certain point, however, the damage becomes irreversible.
Then there is soot and smoke, which people underestimate. The smoke from a fire is toxic and acidic, laden with particles that settle everywhere and eat away at what they touch. On the electronics as on the internal surfaces, these deposits are both corrosive and abrasive.
Finally there is water and extinguishing agents. A drive saved from the fire is very often a drive that has also been drenched, sprayed by firefighters' hoses or covered in foam and powder. You then find the same corrosion mechanisms as in a flood, added to the thermal damage. A fire-damaged drive frequently combines the burnt and the wet.
When it is truly lost
Not all situations are equal, and honesty requires saying so: beyond a certain level of destruction, there is nothing left to do.
When the heat is extreme and the entire device has genuinely burned, not merely melted, the prognosis collapses. We have already received drives that were almost entirely charred, the material melted to the point of being unrecognizable. These cases often arise in fires involving chemical products, which release temperatures far higher than an ordinary fire. There, when the platters themselves have been destroyed, recovery is not possible. That is the limit of the trade, and an honest laboratory will tell you so after analysis rather than charge you for a futile attempt.
What a laboratory actually does
Between the intact drive and the charred drive lies the whole range of recoverable cases, and that is where the work begins. It follows a precise order.
The first step is almost always a thorough cleaning. We take in every drive, then determine the best approach for each one. When material has melted and clumped onto the device, these layers must be patiently removed to bring the drive back to its original state, without damaging it.
Next comes the circuit board. Exposed, it has often suffered from the fire, sometimes partially burned. We then desolder the components essential to the drive's operation, including the chip that holds its adaptive data, and mount them onto a healthy compatible board.
We then clean with isopropyl alcohol, which dissolves the soot without leaving traces, to restore all connections to working order, including the delicate link between the read/write heads and the circuit board. This cleaning work alone can take several hours per device.
Once the drive is clean, we decide whether it needs to be opened in a cleanroom. If we suspect that smoke or water has penetrated inside, where the platters are located, we power nothing on: we first open it in the cleanroom to inspect the state of the heads. And if the platters are affected, we clean them using specific techniques, going as far, in the most serious cases, as to migrate the platters to a donor drive that is perfectly functional and of which we keep only the mechanics. We then move only the platters, which carry your data.
The right moves
Faced with a device pulled from a fire, two reflexes protect your chances, and two mistakes ruin them.
| ✅ To do | ❌ To avoid |
|---|---|
| Keep the device as is, even covered in soot | Plug the drive back in to see if it starts |
| Take it quickly to a laboratory | Open the enclosure to look inside |
| Take the initiative without waiting | Clean or scrape off the soot yourself |
Never plug the drive back in right away. A fire leaves invisible collateral damage, and a damaged circuit board can cause a short circuit that travels up to the read/write heads and finishes off what the fire had spared. Do not open the drive either: opening it "to take a look" amounts to letting dust and soot come into direct contact with the platters, an enormous risk for zero benefit.
The principle applies to other devices as well. An SSD or a USB stick is handled in the same way: we restore as best we can, knowing that their electronic components may have deformed and stopped working, which sometimes requires moving components onto a healthy device.
Insurance and speed: do not let your devices be thrown away
As with a flood, fire damage is covered by insurance, and data recovery can fall within the coverage. So contact your insurer.
But one point is crucial, and we will never say it enough: do not wait. Do not wait for the insurer's approval, do not wait for the company hired to restore your premises to tell you what to do with your drives. Take the initiative and bring your devices to the laboratory as quickly as possible. We freeze them and maintain their condition to prevent them from degrading further.
This urgency is not a sales pitch. The smoke deposited on a device is toxic and acidic, and it keeps eating away at the electronics and the platters as long as the drive has not been taken in hand. Every day counts. And there is another danger, which we have seen with our own eyes, particularly after floods: the restoration company that decrees, without being a specialist, that a device is "done for" and throws it away, when it was perfectly recoverable. Let no one decide the fate of your data in your place.
Frequently asked questions
Can data be recovered from a hard drive after a fire?
Often, yes, especially for hard drives. The device is rarely exposed bare to the flames: its metal tower, or even the melted material of the computer, frequently protects it. After a thorough cleaning and, if needed, a replacement of the electronics or a migration of the platters, recovery is possible in the majority of cases.
Is a hard drive that has been through fire always destroyed?
No. Moderate heat and soot do not prevent recovery. The drive is only truly lost if the heat was so extreme as to char or deform the platters, which happens above all in fires involving chemical products at very high temperature.
What should you do immediately with a hard drive pulled from a fire?
Do not plug it back in, do not open it and do not clean it yourself. Plugging it back in can cause a short circuit that travels up to the heads; opening it lets soot reach the platters. Keep the device as is, even covered in soot, and take it quickly to a specialized laboratory.
Why must you act quickly after a fire?
Because the deposited soot is toxic and acidic: it keeps corroding the electronics and the platters as long as the drive has not been taken in hand. The longer you wait, the worse the damage gets. You must not wait for the insurer's approval or for the cleaning company before having the device's condition frozen.
Does insurance cover data recovery after a fire?
Yes, generally: fire damage is covered and data recovery can be taken over. Contact your insurer, but first entrust the device to a laboratory without waiting for their approval, to prevent the corrosion from progressing or a non-specialist from throwing it away.
Do SSDs and USB sticks survive a fire?
Sometimes. They are handled on the same principle as hard drives, but their electronic components may have deformed under the heat and stopped working. Recovery then goes through moving components onto a healthy device, on a case-by-case basis.