Home / Case Studies / Mac & Apple Systems
Mac & Apple Systems · case file

The Folders Under Finder

This job arrived in the best possible condition: as a bare drive in a padded envelope. An old desktop Mac had crashed, a store had tried and failed to retrieve anything, and the owner — left holding the removed hard drive — hoped it might still be possible to "find some of the folders that were saved under Finder". Hope is the right word to bring, and here's the reasoning behind it: a Mac crashing is an event in the computer; the drive is a passenger, and passengers usually walk away. A drive out of a crashed Mac is simply a data source — read directly, imaged read-only, its Mac filesystem rebuilt from the copy — and the crashed computer's opinion is no longer required.

MacHard DriveCorruption / Filesystem
// case at a glance
MediaA hard drive removed from an old desktop Mac that crashed — a store couldn't retrieve the data; the Finder folders wanted.
Reported situationOld desktop Mac · crashed · store attempt unsuccessful · owner holds the removed drive · folders saved under Finder sought.
Fault classA drive orphaned by its computer's crash — condition unknown until assessed, contents ordinarily intact. The Mac-formatted volume (HFS+ or APFS) is parsed and rebuilt from a read-only image; the machine's fate is irrelevant to the recording.
Equipment usedDirect connection on PC-3000 UDMA behind a hardware write-blocker — the drive's own health assessed apart from the dead Mac; DeepSpar read-only imaging, weak areas handled gently; the Mac filesystem parsed and rebuilt in R-Studio from the image, folders carved by content where structure has suffered; everything verified onto fresh media readable on Mac or Windows.
// the decode

The decode

'The Mac crashed' and 'the drive failed' are different sentences, though they arrive feeling like one. A dead power supply, failed board or expired display all kill the computer around a perfectly healthy drive — and even where the drive did contribute to the crash, 'contributed' spans everything from a few bad sectors to real trouble. None of it can be settled by looking at a dead Mac, and all of it can be settled in minutes with the drive connected directly. First question at the bench, always: how is the drive itself? Everything else follows from that answer.

The store's unsuccessful attempt needs decoding too, kindly. A computer store retrieves data the way computers do it: mount the drive, ask the filesystem nicely, copy what answers. That works on healthy volumes and stops dead at the first real obstacle — a Mac-formatted drive a Windows machine won't read, a filesystem with damaged structures, a disk with weak areas that hang a naive copy. 'The store couldn't' establishes only that the front path is blocked. Recovery equipment doesn't use the front path: it images every sector under hardware control and rebuilds the volume from the copy.

The folders 'saved under Finder' translate cleanly: Finder is simply how macOS shows its filesystem, so those folders are HFS+ or APFS directory structures on this disk. From a complete image, the volume is parsed and the directory tree rebuilt — names, nesting, dates. Where the crash or the drive's condition has chewed structure, content-carving fills in behind it. And the recovered set comes back on fresh media formatted for wherever life goes next — the new Mac, or anything else with a USB port.

// on the bench

On the bench

The bare drive straight onto PC-3000 UDMA, write-blocked — health assessed first, apart from any story about the crash. A read-only DeepSpar image, taken gently where any weak areas suggest the drive shared in the Mac's troubles. R-Studio then parses the Mac volume from the image and rebuilds the Finder folder tree; PhotoRec stands behind it for anything structure no longer names. Recovered folders verified and delivered on fresh media.

// the outcome

The outcome

The folders that lived under Finder, standing again — names and nesting included wherever the structures allowed — recovered from a copy while the original drive rested. Assessment is free, reported inside two working days of the drive arriving, and produces one fixed written figure. Work that stays at filesystem level runs no fix, no fee; if the drive itself turns out to need opening, that clean-air stage takes half up front with the balance on success. Bring hope; we'll bring the write-blocker.

Holding the drive from a dead Mac

You're in a better position than most — the drive is out, unpowered and beyond further harm, so keep it that way. Don't buy a USB dock to have a look: a Windows machine will offer to initialise the Mac volume (decline forever), and a dock's cheerful mounting can write to a drive whose state you don't yet know. Post the bare drive well-padded, and say what you're hoping to find — folder names, file types, anything. It sharpens the search at the far end, and 'the folders under Finder' turns out to be a perfectly good treasure map.

Got one like this in York? Every case here starts the same unhurried way: a free diagnostic, finished inside 2 working days of your media reaching the bench, then one written quote that stays put. Logical faults run no fix, no fee; anything that means opening the drive — mechanical, electrical, water or fire damage — takes 50% of the quote up front; ransomware, CCTV, BitLocker and other forensic-classed jobs are payable up front in full. If the data sits inside a laptop, PC, Mac or server, take the hard drive or SSD out and post the drive alone — we don’t offer an internal drive-removal service, and storage soldered to a motherboard (Apple Silicon Macs and the like) is outside our intake; a drive that unplugs or unscrews is what the bench works on. Send it tracked and insured to Leeds Data Recovery, 17th Floor, The Pinnacle, Albion Street, Leeds, LS1 5AA — packing notes and the shipping form are here.
Start a free diagnostic

Every case file on this site is written up from a genuine enquiry handled for customers across York and North Yorkshire, anonymised to keep client confidence. Each one sets out the diagnostic reasoning and the recovery method our engineers apply to that fault, on the equipment named.

// related case files

More cases like this one

Browse all case studies →

Recognise your own drive in this one?

Free diagnostic inside 2 working days of arrival, one fixed quote, no fix no fee on logical faults — start online or ring the freephone.