Model numbers: DeadBolt, Qlocker
QNAP units exposed to the internet were hit by the Qlocker ransomware in 2021 and DeadBolt in 2022. We check whether snapshots, older copies or unencrypted data remain on the drives. We can't promise to decrypt files, and we'll tell you honestly what is recoverable before any work.
Which model do you have?
Files renamed with .7z (Qlocker) or .deadbolt (DeadBolt) extensions, and a ransom note in the web interface, are the usual signs.
Common faults we fix
- Shares encrypted
- Ransom page replaces the login screen
- Snapshots deleted
- Backup copies also encrypted
What we recover
- Checking for surviving snapshots and older data
- Recovering unencrypted files
- Imaging drives before any further changes
- Advice on securing the NAS afterwards
Before you bring it in
Disconnect the NAS from the internet straight away, but don't reset or reinitialise it.
NAS data recovery prices
| Service | Price |
|---|---|
| Free initial consultation | Free |
| 2-drive NAS (for example 1TB + 1TB) with one drive to repair | £450 + VAT (£540 inc. VAT) |
| QNAP or Synology RAID 5 NAS | £650 + VAT (£780 inc. VAT) |
The free consultation tells you whether the fault is physical or logical and the best way to recover your data. It doesn't include opening the drive in the cleanroom or any recovery attempt.
Larger NAS units and RAID 6 or RAID 10 volumes are priced like RAID recovery.
We can supply an external drive to return your recovered data on. The price depends on the market rate at the time.
See our full data recovery price list.
Bring it in
Walk in to Unit 1, 80 Willow Walk, London SE1 5SY, Monday to Saturday, 9am to 6pm, or call 020 7237 6805. We confirm the fault and quote before starting any work.
See also our ransomware recovery service for PCs and servers.