Bitlocker bug caused file encryption that cannot be unlocked

Question

Using a test device that is no longer available, I encrypted an external HD with Bitlocker. It didn't work as expected so I decrypted that device and allowed the decryption to complete. It only decrypted 80% of the device. No folders are encrypted, but a collection of individual files have a gold lock on them and can't be opened. I retained the Bitlocker key for that external HD, but there isn't an option to enter that key or credentials anywhere. It almost appears as though I don't have access to the files that belong to me.

I opened a ticket and was supposed to be assisted by tier2 but that didn't happen:
Bitlocker failed to decrypt external hard drive

Request Number

1056585811

Status

Acknowledged

What're next steps to regain access to the files?

Answer 1

Final update: the company was able to recover the data from the laptop in question BUT they weren't able to resolve the corruption issue caused by Bitlocker. The reality is that Bitlocker caused the loss of over 30000 files, some dated back before 2011. And the biggest slap in the face, I can see the files, but I cannot open them.

But on a lighter note, I have redundancy and I was able to recover 99.9% of my pictures. Any videos in that file list are forever lost unless I had it elsewhere. The estimated quote for work done if the recovery went correctly would be around 3k.

IF you have this issue and come across this post, chances are high that you're out of luck. If you decide to pursue legal action reference this post to build a case that Microsoft is a bad actor and has caused irredeemable harm. I'll keep notification on just in case updates are needed.

Answer 2

Update for those tracking, my data was able to be recovered by relying on an external party. So in the future, if Bitlocker encrypts your data and you have the Bitlocker key as well as the identifier, certain companies can recover your data by working with Microsoft. I didn't have the certificate as I deactivated Bitlocker so I didn't have a need for the cert. Having the key was luck because I use a password manager.

However, this shows there is a way to recover your data without the certificate. So what may seem hopeless, is not actually hopeless. And it also shows Microsoft and Bitlocker do have a way to help you, if you can't receive assistance it's because they have chosen not to. An example of that would be, the scheduled call finally came in, at 2am multiple days later.

Answer 3

Good afternoon Lightjack,

Thanks for taking the time. The external HD is fully decrypted by Bitlocker. There is no password requested when the device is plugged in, and 80% of the device is operational. There is random files that're now pfile's, and I'm unable to decrypt them. There isn't an option for a password or recovery key, the files themselves seem to be locked away with no access.

As I've been digging I seem to need a cert that I don't have. So I'm reaching out to nearby data recovery sites. One in particular in my area is confident they can retrieve the files, and as a backup, the wiped machine is in my possession. It has been wiped and has reinstalled the OS, but no updates have been done. I powered it off, and will try to recover the cert from that with data recovery IF what I try from the data recovery location in my area doesn't work.

I think this will be successful and I'll update the ticket so people who run into this in the future will have an idea for help, because Microsoft left me out to drown on my own.

Answer 4

Hi,

if the decryption process has been interrupted, you can try plugging in the drive, and seeing if you get any option in bitlocker settings on another device.

You may also try decrypting using powershell: Disable-BitLocker (BitLocker) | Microsoft Learn

If you can't get the disk fully decrypted, you may just be out of luck here...

However, what you describe sounds less like bitlocker, and more like NTFS File System Encryption. You may have a certificate or something backed up to unlock such drives.

Sincerely,

LightJack