BitLocker partition formatted

[unknown]

Hello
The customer formatted a BitLocker partition. Is there any way to recover the data.
I have the recovery key.

Any suggestions?

Thanks in advance

[Doomer]

scan it for metadata with repair-bde

[unknown]

@ Doomer, Thanks a lot for your response.

[pcimage]

Or you can use “M3 Bitlocker Recovery”.

It’s not cheap but it often does it when repair-bde can’t.

[unknown]

Or you can use “M3 Bitlocker Recovery”.

It’s not cheap but it often does it when repair-bde can’t.

I already have it. But didn't use it yet until repair-bde finishing scanning for metadata.

I appreciate your both responses.

[unknown]

After scanning the entire partition with repair-bde and M3 BitLocker both couldn't success.
Tried scanning the partition with R-Studio I have found 2GB of data intact.
Is that mean that the customer after formatting the partition overwrite it with new data, am I right here?
If so, is there any chance to recover the data?

Thanks in advance.

[Doomer]

if repair-bde couldn't find metadata then it's probably not on the drive
W/o metadata you cannot decrypt the drive even though you know the password

[unknown]

if repair-bde couldn't find metadata then it's probably not on the drive
W/o metadata you cannot decrypt the drive even though you know the password

Thanks for response sir,
The customer said to me that he just quick formatted the drive and didn't overwrite anything. But he tried several recovery softwares but didn't overwrite on the same partition as he said ( He supposed to be the IT manager of his company )

[rogfanther]

Is it certain the drive had bitlocker ? Maybe it had another kind of encryption and the customer is mixing the names ?

[unknown]

Is it certain the drive had bitlocker ? Maybe it had another kind of encryption and the customer is mixing the names ?

C partition is encrypted with BitLocker too. I can open C partition with it's recovery key.
He said that he formatted the D partition because it wasn't accept the recovery key or password thinking that when he format the partition he will use a recovery software and recover the data .

[unknown]

Another customer come with almost the same case ( but this time he didn't format it )
M3 BitLocker get the metadata very quickly and shows the data.

This is the day of BitLocker

[pepe]

once i made a test. When i formatted the bitlocker partition in a bitlocker aware os, it wiped all metadata sectors, so recovery key alone is not sufficient to decrypt. The exported metadata could only help in such situation.
IMO

[unknown]

I have tried several methods to work around. Unfortunately, nothing work, beside that the customer was need the drive in the same day.
So Mr. Pepe, will you refuse a drive like that for data recovery?

[pepe]

that's definitely the case. at least without the exported metadata.

[LoboX]

Heh,

Have a similar situation yet no Key or password.