just woke up in the morning, trying to watch a movie from mycloud, was shocked to find out that all data in my three shares are completely lost, i am talking about 2.5 TB of photos (very precious photoss), movies and music.
the drive has the same shares and users i created, but no data what so ever.
any ideas if possible and how to recover the deleted files?
how are you determining it is gone?
how much free space is shown in the UI?
have you re-booted?
it is showing 3.9TB, i.e it is completely empty, i rebooted, reset (held reset button for 4 seconds) and restored (no data wipe, held reset button for 44 seconds).
sounds like the data is gone? I have not heard of this before unless a drive fails
do you have SSH setup? If so you can connect to a terminal session and run df -k
the below dosn’t really matter at this point, just trying to understand what happened
since this happened over night I am guessing you did not do this. Was the data in a public or private share? anyone else have access? have you manually created any remote access / port forwarding? Do you have a good password for your wifi?
this the printout
WDMyCloud:~# df -k
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 1968336 690180 1178168 37% /
/dev/root 1968336 690180 1178168 37% /
tmpfs 40960 3904 37056 10% /run
tmpfs 40960 64 40896 1% /run/lock
tmpfs 10240 0 10240 0% /dev
tmpfs 5120 0 5120 0% /run/shm
tmpfs 102400 3008 99392 3% /tmp
/dev/root 1968336 690180 1178168 37% /var/log.hdd
ramlog-tmpfs 20480 5312 15168 26% /var/log
/dev/sda4 3841069352 3330852 3759692436 1% /DataVolume
/dev/sda4 3841069352 3330852 3759692436 1% /CacheVolume
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Eman
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/TimeMachineBackup
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Public
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/SmartWare
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Videos
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/rami
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/files
/dev/sdb1 976851964 964825360 12026604 99% /var/media/My_Passport
/dev/sdb2 710386684 661420576 48966108 94% /var/media/New_Volume
/dev/sdb3 266174976 100390336 165784640 38% /var/media/My_Passport_0748
the files mostly on private share: rami, others on public, all on sda4, i have an attached 2tb mypassport, was not affected, i dont think somedbody did it, no one usually access my wifi, and remote access was already working, the last good state was the night before, i was downloading some movies to the cloud via utorrent, my laptop froze, i forced shutdown, the next day everything was gone.
data is gone. still concerned about why. there is a slim chance of recovery if you remove the drive and install it on another Linux system, search for details as it has been discussed a few times
in ssh run last and see if there are any unexplained logins around this time
you can also look in /var/log at any files modified around or after this time
and for future reference always have a backup and a recent offsite backup is a good idea too