Open, and logging new jobs · weekdays, 9am–5:30pm Phone is quicker: 0800 6890668
HDR Hull Data Recovery 0800 6890668 Price it up
HDR / Evidence and legal work / Recordings deleted off a DVR

Investigations & evidence · erased recorder disks

Deleted CCTV recovery, Hull. The disk still holds it; the loop is what takes it.

The recorder is still writing while you read this, and that is the whole problem. Deleting through the menu drops one row from the unit's index; the video blocks stay where they are, in the queue for the loop. Get the power off early and most of the footage returns with its camera and its clock attached. Once the loop has been over those blocks, none of it does.

No data back, no fee on most jobs An exhibit from day one It is being written over now

Ring us, in confidence
0800 6890668

Two routes in, and one dead end.

What the index doesA DVR keeps a table linking each camera and time to a physical spot on the drive. Deleting through the menu crosses out one line of that table. What the line pointed at is still on the disk.
Reading it — the best outcomeWhere the table survives intact, footage comes out in sequence, every clip tagged with its source camera and the minute of recording. None of it needs qualifying.
Carving — the second bestWith no table left, the image is scanned for the markers that head every compressed frame, and the results are pieced together into clips that play. You get the pictures. Camera names and the clock generally do not come with them.
Overwritten — the hard stopOnce new video occupies those blocks, the older recording is no longer on the platter. There is no second copy beneath it. No software, and no lab, alters that.

Putting a name to the symptom.

Not one of these? Ring us →
What you seeWhat the fault isWhat to try
Someone deleted the recordings on the unitAn index row went; the picture data did notPower off, right now
The box reformatted itself after a faultA format writes a blank index and not much elseCarving copes with that, so the odds are decent
It carried on recording for daysEvery extra hour of recording bites further into the oldest materialSend the disk today
The oldest recording is later than the date you wantAlmost certainly written over, though the free check proves itThat check costs nothing
Clips play with no channel or timestampCarved video keeps the picture, not the labellingExpected, and marked on the file list
Files left by an earlier attempt do not openRaw video streams were pulled but never containerisedWe wrap them into MP4 files that play
Sending it to us: insured, tracked post to the intake lab; the way home is paid at our end. Ring before it goes if you would rather someone checked the packing with you first. It is all written down on the sending page.

The stages, one by one.

The casebook in full →
01

A case number first, then a free diagnosis Free

Each item that arrives gets a case number the day it lands. An engineer looks at it and finds the real fault, and that costs you nothing. You are told in plain terms which files can come off the drive and which cannot. A price follows — one figure, written down. No work starts until you have seen it and agreed to it.

The diagnosis is freeOne price, put in writingNothing to pay yet
02

Stop the disk

Power off the recorder, take the drive out, image it through a write blocker. From then on nothing more can be lost: every block the loop had not yet reached is preserved in that image.

Unplugged firstWrite-blocked copy
03

Read the index

The rest of the work happens on that image. We look for the maker's own filesystem: a Hikvision's HIKBTREE, a Dahua's DHFS. Where enough of it survives, what comes out carries the true channel name and the real recording time. That is the version a loss adjuster takes without argument.

Timestamps intactCamera labels restored
04

When no index is left

With no structure to follow, the whole image is searched for the byte markers that open each compressed frame, H.264 and H.265 alike, and what turns up is assembled into clips an ordinary player will run. The file list marks the ones that held their timing, and the ones that did not.

Whole-image frame scanUnlabelled clips flagged
05

You sign it off, then it comes back

You are not billed while you are still thinking. The list of what came off the drive goes to you first, and the invoice waits on your word. Files go home on media bought in for the job, with the postage back on us. We keep the job open until you have opened them on your own machine.

You approve the listing firstCopied onto new mediaReturn postage at our cost

What we see on the bench

  • A delete is an accounting entry — the unit strikes one line out of its index and carries on recording. Nothing at all leaves the platter.
  • Compressed frames start the same way every time — H.264 and H.265 both begin each frame with a fixed byte pattern, and a scan can find them. That is the whole reason carving works with no index at all.
  • Labels save you explaining — a clip that still carries its channel name and its timestamp needs almost nothing said about it, so labelled and unlabelled files come back on separate lists.
  • Do the arithmetic first — cameras, bitrate and disk size together decide how far back the unit can hold. Set that against the date you actually need and you know where you stand before anyone talks about money.

Loop recording, plainly: the disk is cut into blocks of equal size and filled in order, first to last. Reaching the last one, the recorder returns to block one and writes straight over what is sitting there. A deleted clip therefore lasts precisely until the write head comes round to that spot. Pulling the plug is not a precaution before the recovery. It is most of the recovery.

One case from the casebook.

HU · HUL-2026-0552LOGGED ✓

A wiped week, and most of it back for a Newland Avenue shop

Someone behind the counter had cleared down footage that looked long past use. The theft was in the middle of it. What saved it was the recorder being stopped within a few hours. For four of the five missing days the index entries and their timestamps were still there. The fifth came back as carved video: it plays, but nothing names it.

4 of the 5 missing days, timestamps and all72 hours of bench time

Before you box it up.

Do these first

  • Pull the plug the moment you find out
  • Note down the day, the time and the camera numbers
  • Send the disk exactly as it came out
  • Tell us up front who the video is for

What not to do

  • Waiting to see, while the loop runs on
  • Formatting the disk to get the box going
  • Running shop-bought undelete tools on it
  • Taking the installer's word before anything has been imaged

What we get asked on the phone.

Can you get back CCTV that has been deleted?

Usually, yes. A delete removes the recorder's catalogue entry and does nothing else. The blocks holding the pictures stay put on the disk until the loop works its way back to them. Cut the power and nothing moves after that.

Why is overwritten video unrecoverable?

The new recording sits in the same blocks the old one used, and a platter stores one state in a block, not two. Nobody can promise a result once that has happened, and anyone who does is selling.

Do the timestamps and channel names survive?

Often, if enough of the maker's index is still readable. Where we have to carve frames out of the raw sectors instead, the pictures come back but the labelling usually does not. The file list we send says which clips arrived without it.

How soon does the loop write over it?

It depends on the number of cameras, the bitrate they record at and the size of the disk. There is no standard figure, whatever you have been told. Add cameras, or add movement for them to record, and the oldest footage goes sooner.

The recorder is overwriting it now.

The clip you want is being written over while you read this, and the deadline has not shifted. Log a job. The first look costs nothing, and what you tell us stays private.

0800 6890668