Data Recovery Case File · Cameras, Drones & Cards · One Survivor Is the Clue
A Deletion Removes What Was Chosen, Not Everything Except One
His enquiry describes a disappearance with a survivor. A camera card that "recently has deleted all but one photo. We could view photos the day before, then the next day all but one were gone. The card was seven years old." Nothing chose to keep that one image — and the fact that it remains is the strongest evidence that this was a structural failure rather than anything anybody did.
| Media | 64GB SD card of approximately seven years in camera use — directory structures failing between sessions; single entry surviving; content regions intact |
| Reported situation | Card in regular camera use for approximately seven years · photographs viewable on the card the previous day · all but one photograph absent the following day · no deletion or formatting performed · photographs required |
| Fault class | Directory structure failure with content present — surviving entry indicating partial structure survival rather than selective deletion |
| Equipment used | Occupied capacity reconciled against visible entries before any conclusion · no writes or formatting permitted · imaged write-blocked under strict timeouts · directory structures recovered from surviving copies · signature carving alongside · images validated by rendering |
The decode: why one survivor rules out deletion
What a deletion does: removes the entries for items that were selected. It is an operation with a target, and no plausible version of it leaves exactly one photograph behind while removing hundreds without anybody choosing which.
What a format does: replaces the entire directory, which would leave nothing at all. Neither of the two things people assume happened produces this pattern.
What does produce it: the structure that lists the photographs becoming partly unreadable. The directory occupies specific regions of the card, and if those fail, the entries in them go — while entries in a region that still reads survive. The one remaining photograph is the one whose entry happened to sit somewhere that still works.
Why that is arbitrary rather than meaningful: which photograph survived says nothing about it. It is a fact about where its entry landed on the card, not about the image.
Why the age matters a great deal here: seven years is a long working life for a card in regular camera use. Flash memory wears with writing, and the controller replaces worn blocks from a reserve until that reserve runs out — after which the regions holding directory structures are as vulnerable as anything else, and those are written far more often than the photographs themselves.
Why the directory fails before the images: every photograph taken updates the directory. So that region has been written thousands of times more than any individual picture, which is exactly why structures fail first and content survives.
What follows, and it is the encouraging part: the photographs are still on the card. They were written once each and never touched again, and what has failed is the index describing where they are. That is among the more recoverable situations here.
The check that confirms it, and it costs nothing: compare the space the card reports as used against the one visible image. Capacity consumed with almost nothing listed means the content is present and undescribed.
What must not happen: no further use of the card in the camera, and no formatting when it is offered.
On the bench
Occupied capacity was reconciled against visible entries before any conclusion — deletion being an operation with a target and formatting removing everything, so neither produces a single arbitrary survivor, while partial directory failure leaves whichever entries occupied still-readable regions. No writes or formatting were permitted. Imaging ran write-blocked under strict timeouts, directory regions being rewritten with every exposure and therefore wearing far ahead of image content.
The outcome
Capacity reconciled against visible entries, no writes permitted, and structures recovered from their surviving copies. Free assessment, one fixed written figure including VAT; where a chip has to be removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: nothing deleted your photographs. A deletion removes what was selected and a format removes everything — neither leaves exactly one behind. The directory listing them has partly failed, and the survivor is simply the entry that sat in a region still reading.
Card that lost almost everything overnight
Stop using it in the camera and refuse any offer to format. Take encouragement from the survivor: a deletion removes what was selected and a format removes everything, so neither explains one photograph remaining out of hundreds. What does explain it is the directory partly failing, leaving whichever entries happened to sit in regions that still read. On an older card that's expected — every photograph you take rewrites the directory, so that area has been written thousands of times more than any individual image, which is why structures fail first. Your photographs were written once each and are almost certainly still there.
Keep it out of the camera — call Oxford Data Recovery on 01865 593000; capacity reconciled against visible entries, imaged write-blocked, directory structures recovered from their surviving copies.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.