Data Recovery Case File · Mac & Apple Systems · Both Answers Were Right Once
Whether to Remove the Drive Depends Entirely on Which Generation the Machine Is
His enquiry reports two pieces of advice that cannot both be followed. Told by one party to have the drive removed and sent in, and by another that "it would be better to hand in the whole device, since the drive is connected with other parts." Both statements were correct for different machines, and which applies here is settled by the model rather than by opinion — so it is worth establishing before anything is moved.
| Media | Laptop with liquid ingress — storage architecture dependent on model generation; removable module or board-integrated memory not yet established |
| Reported situation | Laptop subject to liquid damage · advice received to remove the drive and submit it alone · contrary advice received to submit the complete device · owner uncertain which to follow · attendance in person offered · content required |
| Fault class | Liquid damage with storage architecture unestablished — removable module and integrated memory requiring different handling; corrosion progressing meanwhile |
| Equipment used | Model and year checked against the serial before anything is opened · architecture confirmed as removable module or board-integrated from that record · storage module removed and imaged independently where removable · board-integrated machines identified before any media is shipped |
The decode: why both answers exist, and how to settle it
What machines of earlier generations allowed: removal. Storage was a separate module that unplugged and could be read on other equipment, so a damaged machine was an obstacle rather than a factor.
Why the first advice was standard for years: it is the better route when it applies. Removing an undamaged drive from a damaged machine takes the liquid problem out of the case entirely.
What changed in later machines: storage became part of the board. Memory is soldered alongside the processor with no connector, and there is nothing to remove.
Why the second advice is right for those: the board is the drive. Attempting to remove storage that is soldered achieves nothing and risks the components that matter.
Why the second party may also be right for a further reason: content on recent machines is encrypted by hardware. The key is held by a security component on the same board, so the memory alone yields nothing interpretable — and the board must be kept with it.
How the question is settled: by the model and year. The architecture is a matter of record rather than judgement, and it can be established before anything is opened.
Why the model must be checked before anything is opened: it decides whether there is a drive to remove at all. Ten minutes with the serial number settles it, and it costs nothing to do first — where the storage is a module, it comes out and travels on its own; where it is soldered, opening the machine achieves nothing.
Why removal needs a steady hand after liquid damage: corroded connections are fragile. Removing a module from a corroded socket can damage both, so have it done by a repair shop rather than forcing a connector that has started to corrode.
Why time is the more urgent factor here: corrosion continues. Residue remains conductive and draws moisture from the air, so damage progresses while the decision is being made.
What must not happen meanwhile: no attempts to power the machine, and no drying with heat. Powering a board with liquid residue creates paths for current that were never intended.
On the bench
Model generation was established as determining the correct handling before any disassembly — earlier machines providing a removable storage module which can be read independently of a damaged host, later ones soldering memory alongside the processor with content encrypted against a security component on the same board, so memory alone yields nothing interpretable. The architecture is a matter of record, so it is established from the model before anything is opened rather than discovered during disassembly. Corrosion was mapped at component level.
The outcome
Model generation established as determining handling, confirmed from the serial before anything was opened, and corrosion mapped once the storage module reached us. Free assessment, one fixed written figure including VAT; where a chip has to be removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: both people were right, about different machines. Older ones have a drive you can take out; newer ones have memory soldered to the board and encrypted against a component on it — so the model settles it.
When you are given conflicting advice about a damaged machine
Check the model and year before you open anything — that single fact settles which advice applies, and it costs nothing. The disagreement isn't carelessness: older machines have a storage module that unplugs, and newer ones have memory soldered beside the processor and encrypted against a security component on the same board, so there is nothing to take out. Where the drive does come out, send it on its own — a repair shop will remove it in minutes and will not force a corroded connector. Don't power it or dry it with heat, and move quickly, since corrosion continues after the liquid has gone.
Check the model first — call Cambridge Data Recovery on 01223 655015; the serial number tells us whether there is a drive to remove, before anything is opened or sent.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.