Data Recovery Case File · Cameras, Drones & Cards · He Stopped It in Time
Switching Off Mid-Format Leaves the Images and Removes What Points at Them
His enquiry describes a fast reaction to a dangerous prompt. A card holding eight hundred images from a commissioned shoot, where "the card tried to format when I put it into a second camera. I shut the camera off straight away and removed it — but when I opened it on my laptop all images were gone." Stopping it immediately was the right instinct and it worked — a format interrupted at the start clears the index and leaves the photographs where they are.
| Media | 64GB memory card holding approximately 800 images from a commissioned shoot — format initiated by a second camera and interrupted; images not visible; card unused since |
| Reported situation | Card holding approximately 800 images from a commissioned event · card inserted into a second camera · camera initiating a format · camera switched off immediately and card removed · card not used since · images not visible on a laptop · consumer recovery tools attempted without result · images required |
| Fault class | Interrupted format on a card with no subsequent writing — index replaced while image data persists; carving prospects favourable |
| Equipment used | Interrupted format assessed as index replacement with content retained · absence of subsequent writing confirmed before assessment · card imaged write-blocked before any scanning · signature carving targeted to camera image structures · recovered images validated by opening at full resolution |
The decode: what those seconds did and did not do
Why a second camera offered to format at all: cameras write their own folder structure, and one encountering a card prepared by a different body frequently does not recognise the arrangement. Rather than reading it, it offers to prepare the card for itself — which is a routine prompt with a serious consequence.
What a format does in its first moments: writes a new, empty index at the start of the card. That is a small operation affecting a small area, and it happens almost immediately once the process begins.
What it does not do in those moments: touch the images. The photographs occupy the vast majority of the card and are not written over by a format — they remain physically in place until new data is written on top of them.
So what his quick reaction achieved: it prevented anything further. The index was replaced and nothing else was written, which is the best possible outcome once a format has started — the damage is confined to the map rather than the territory.
Why the images then appear gone: the laptop reads the new empty index and reports an empty card. It is describing the index accurately and the card inaccurately — eight hundred images sit beyond it, unreferenced rather than removed.
Why not using the card since is the second thing he did right: the only remaining danger is writing. Every photograph taken on it, and every attempt by a device to prepare it, would land in space now marked as free — which is precisely where his images are.
Why the consumer tools found nothing: many scan for deleted directory entries, and a format replaced those wholesale. Searching for entries that no longer exist finds nothing on a card whose content is intact — the tool asked the wrong question rather than reporting an empty card.
What is asked instead: the raw content is searched by signature. Camera images begin with recognisable patterns that identify them without any index, and a card holding eight hundred large image files is a favourable target — they are big, mostly contiguous, and written in sequence.
Why the sequence matters for what is done next: the card is imaged first and never scanned again. Every attempt runs against the image, so several approaches can be tried without further cost to the original — the opposite of running tool after tool on the card.
What must not happen: nothing further inserted into any camera, no acceptance of a format prompt, and no more recovery tools run against the card directly. It should be set aside entirely.
On the bench
The interrupted format was assessed as index replacement with content retained — a camera encountering a folder structure written by a different body offering to prepare the card rather than read it, with the format writing a small empty index almost immediately while leaving image data physically in place until overwritten, so interruption confines the effect to the index. Absence of subsequent writing was confirmed before assessment. Carving was targeted to camera image structures against the image rather than the card.
The outcome
The interrupted format assessed as index replacement, absence of subsequent writing confirmed, and carving targeted to camera image structures. Free assessment, one fixed written figure including VAT; on cards where content has been deleted or overwritten, the figure is payable upfront. The decode: switching off straight away worked. A format writes a small empty index almost immediately and does not touch the photographs — so your eight hundred images sit beyond it, unreferenced rather than removed.
When a camera offers to format a card that already has images on it
Decline it, and if it has already started, switching off immediately is the right reaction — a format writes a small empty index almost at once but doesn't touch the photographs, so interrupting it confines the damage to the map rather than the images. Then stop using the card entirely, because the only remaining danger is writing into space now marked free, which is exactly where your images are. Expect a laptop to report the card as empty: it's reading the new index accurately and describing the card wrongly. Consumer tools finding nothing usually means they searched for deleted entries a format replaced.
Set it aside now — call Easy Data Recovery on 028 9002 0144; interrupted format assessed as index replacement, imaged before any scanning, carving targeted to camera image structures.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.