WD mycloud data lost completely

Legacy Products My Cloud OS 3
1

just woke up in the morning, trying to watch a movie from mycloud, was shocked to find out that all data in my three shares are completely lost, i am talking about 2.5 TB of photos (very precious photoss), movies and music.

the drive has the same shares and users i created, but no data what so ever.

any ideas if possible and how to recover the deleted files?

2

how are you determining it is gone?

how much free space is shown in the UI?

have you re-booted?

3

it is showing 3.9TB, i.e it is completely empty, i rebooted, reset (held reset button for 4 seconds) and restored (no data wipe, held reset button for 44 seconds).

4

sounds like the data is gone? I have not heard of this before unless a drive fails

do you have SSH setup? If so you can connect to a terminal session and run df -k

the below dosn’t really matter at this point, just trying to understand what happened

since this happened over night I am guessing you did not do this. Was the data in a public or private share? anyone else have access? have you manually created any remote access / port forwarding? Do you have a good password for your wifi?

5

this the printout

WDMyCloud:~# df -k
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 1968336 690180 1178168 37% /
/dev/root 1968336 690180 1178168 37% /
tmpfs 40960 3904 37056 10% /run
tmpfs 40960 64 40896 1% /run/lock
tmpfs 10240 0 10240 0% /dev
tmpfs 5120 0 5120 0% /run/shm
tmpfs 102400 3008 99392 3% /tmp
/dev/root 1968336 690180 1178168 37% /var/log.hdd
ramlog-tmpfs 20480 5312 15168 26% /var/log
/dev/sda4 3841069352 3330852 3759692436 1% /DataVolume
/dev/sda4 3841069352 3330852 3759692436 1% /CacheVolume
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Eman
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/TimeMachineBackup
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Public
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/SmartWare
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/Videos
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/rami
/dev/sda4 3841069352 3330852 3759692436 1% /nfs/files
/dev/sdb1 976851964 964825360 12026604 99% /var/media/My_Passport
/dev/sdb2 710386684 661420576 48966108 94% /var/media/New_Volume
/dev/sdb3 266174976 100390336 165784640 38% /var/media/My_Passport_0748

the files mostly on private share: rami, others on public, all on sda4, i have an attached 2tb mypassport, was not affected, i dont think somedbody did it, no one usually access my wifi, and remote access was already working, the last good state was the night before, i was downloading some movies to the cloud via utorrent, my laptop froze, i forced shutdown, the next day everything was gone.

6

data is gone. still concerned about why. there is a slim chance of recovery if you remove the drive and install it on another Linux system, search for details as it has been discussed a few times

in ssh run last and see if there are any unexplained logins around this time

you can also look in /var/log at any files modified around or after this time

and for future reference always have a backup and a recent offsite backup is a good idea too