We're taking on new cases now · Weekdays, 9am–5:30pm Need it back quickly? Call 0800 6890668
MKDR Milton Keynes Data Recovery 0800 6890668 Get it diagnosed
MKDR / Investigations & evidence / Footage wiped or written over

Investigations & evidence · erased recorder video

Deleted CCTV can come back. Overwritten CCTV cannot.

Ask one question first: is the recorder still switched on? Deleting a clip removes a line from the DVR's index. The video itself stays in place until the loop comes round to that part of the disk and records over it. Stop the machine early and most of it returns, times and channels attached. After an overwrite, nothing does.

Nothing back, nothing to pay Kept to evidential standards The loop is overwriting — move now

Speak to an engineer in confidence
0800 6890668

Two routes back, and one dead end.

The index nobody seesEach recorder keeps a private table mapping camera and time to a position on the disk. Delete from the menu and the table entry disappears; the video it pointed at does not.
Rebuilding it — best caseEnough of that table left to parse and the footage comes out in order, each clip tagged with the camera that shot it and the minute it was shot. No caveats needed.
Carving — the backstopTable gone? Then the disk is read sector by sector for H.264 and H.265 frame headers, then stitched into files that play. The pictures live; the labels usually don't.
Overwritten — the full stopWhen fresh video takes those blocks, the earlier bytes are simply gone from the disk. Nothing lies beneath them. No software and no lab changes that.

What those symptoms actually mean.

Unsure? Call the lab →
The problemWhat's behind itFirst move
Someone deleted clips in the app or menuThe index lost a line; the video blocks are untouchedPower the recorder off now
The unit formatted its own disk after an errorA format writes a new index and touches little elseCarving deals with it; odds are decent
Nobody switched it off for three daysEvery hour of recording buries another slice of the oldest dataGet it to us this week
Everything on the disk postdates the incidentProbably overwritten; the free look confirms itWe'll say so, free of charge
The clips play, but nothing is labelledCarved video: pictures survive, labels don'tExpected, and told to you upfront
Files from a previous attempt won't openRaw streams pulled off, never rebuilt into filesWe turn those streams into playable MP4
Sending it by post: gear and media reach our secure intake lab by insured, tracked post, and we cover the return postage — or ring first and we'll work out the best way to send it. There's more detail on the enquiry page.

Each stage of the work.

See past cases →
01

Logged in, checked at no charge Free

Every item gets its own case number on the day it lands here. An engineer traces the fault, gives you a plain assessment of what is realistically recoverable, and puts one fixed price in writing. The diagnosis is free, you are under no obligation, and chargeable work starts only when you say go.

No charge to diagnoseOne written quote, fixedNo commitment
02

Stop the writing

Power off, disk out, write-blocked image taken. From that moment the disk is a fixed object: whatever survived the loop is safe on our copy.

Mains pulled firstWrite-blocked copy
03

Rebuild the index

On the copy we hunt for the maker's own index — HIKBTREE on a Hikvision, DHFS tables on a Dahua. Read enough of it and clips come back with real channel names, dates and times: the version an insurer can use.

Real times kept intactCamera numbers back
04

Carve straight from sectors

With no index left, we read the disk end to end looking for the start codes that mark H.264 and H.265 frames, then group them into files that play. You are told plainly which clips arrived with timing data and which came back bare.

Frame-level disk sweepYou're told which is which
05

Played back, checked, handed back

You get the full list of recovered files first, and nothing is charged until you approve it. Data goes back on fresh media, return postage paid, and the job stays open on our side until you confirm every file opens at your end.

You sign off the file listCopied onto unused mediaReturn post is paid by us

What the lab will and will not say

  • Delete means de-list — the recorder scrubs one row from its database and moves on. The pictures stay where they were written.
  • Video has a fingerprint — H.264 and H.265 frames start with byte patterns we can search for, so carving needs nothing else to work from.
  • A stamped clip argues better — footage carrying its own channel and clock needs less explaining to a claims handler or an officer, so we always tell you which of the two you have.
  • Arithmetic first, invoice later — disk size against camera count and bitrate gives the loop length; set that against your incident date and you know the odds before paying.

How the loop actually works: the recorder splits the disk into fixed blocks and fills them in order. At the end it returns to the start and reuses the oldest block, whatever it holds. A deleted clip lasts only as long as it takes new recording to reach it. Power off isn't caution; it's the recovery.

Lately in the casebook.

MK · MKD-2026-4552CONFIRMED ✓

An Olney farm shop's missing week, largely recovered

Someone on the staff binned a batch of 'old clips'. One held a theft. The recorder was switched off that same afternoon, which is why any of it survived: index entries still held four of the five lost days, timestamps and all, and carving brought the fifth back — playable, but with no labels.

4 of the 5 days, timestamps kept72 hours on the workbench

While it is still in your hands.

Worth doing

  • Switch the recorder off before anything else
  • Write down the time, the date and the camera numbers
  • Send the bare disk, exactly as it came out
  • Tell us at the start who the footage is for

Best avoided

  • Carry on recording and hope for the best
  • Reformat the disk to 'start it working again'
  • Point consumer undelete software at the recorder disk
  • Believe a verdict reached without the disk ever being imaged

Quiet questions, plain answers.

Can deleted CCTV footage be recovered?

Usually, yes. Deletion clears the index rather than the footage itself, so the clips stay on disk until the loop returns to them. Switch the recorder off and the odds hold up.

Why is overwritten footage unrecoverable?

The new recording has physically taken the place of the old bytes; there is no layer beneath to read. Anybody claiming different is selling, not engineering.

Do the timestamps come back too?

Often, provided the recorder's index is still intact. Where we have to carve frames out raw, the clips play, but timestamps and channel names can be lost — and we tell you precisely which ones arrived that way.

When does the loop overwrite the footage?

Days, or a month, or longer: camera count, resolution and disk size between them set it. Busy systems overwrite soonest, so switch the recorder off and assume the clock is against you.

Evidence has a short life. Move now.

Loop recording writes over the old footage, and deadlines won't wait. Open a case now — the first look costs nothing and stays confidential.

0800 6890668