We are booking in new cases · Weekdays, 9am–5:30pm Urgent case? Call 0800 6890668
MHDR Maidenhead Data Recovery 0800 6890668 Send it in
MHDR / Specialist cases / Buffalo NAS recovery

Specialist work · Buffalo NAS

Buffalo NAS recovery, Maidenhead. EM mode is a symptom, not a verdict.

Buffalo announces trouble with a blinking count and the letters EM, and neither tells you which layer failed: it may be the boot partition after a failed update, a member that has dropped out of the array, or a data volume that will not mount. The remedies differ, and the wrong one writes over what you came for. Until the disks have been imaged, leave the unit powered down and decline every offer to restore or reinitialise; a Buffalo NAS can be posted in from Maidenhead complete, disks left in their bays.

No fee unless the data comes back Diagnosis free, then a fixed quote Post it in from Windsor, Slough or anywhere else

Describe the fault to an engineer
0800 6890668

Buffalo NAS symptoms, and what each one means.

None of these? Run the triage →
The symptomThe likely causeStart here
The LEDs are blinking a fault codeOne code, three candidates: the array, a disk, or the firmwarePower it down; note the blink count
The console shows an array degradedA member has dropped out; the unit carries on with nothing spareThe clock is against you now
The LinkStation shows no sign of lifeThe chassis holds nothing; your shares are on the disks inside itOne of the better outcomes
A firmware update ran and it never came backThe boot partition took the damage, not the data partitionRefuse the reinitialise prompt
Windows offers to format the disksAs expected: Windows cannot read XFS or ext4Say no to it
Empty shares, with a ransom note left behindA campaign that hunts NAS boxes left on the internetPhotograph the note, pull the power, see the ransomware page
If you post it in: use a tracked, insured service addressed to our secure intake lab, and the return leg is paid at our end; if you would rather check the packing first, an engineer will go through it by phone. Each step is set out on the postage page.

Why a Linux PC will not mount Buffalo NAS disks.

Its own metadataBuffalo describes its arrays in a format of its own rather than a plain Linux superblock. Pull the disks and a workstation lists partitions it declines to assemble, which is why moving them to a Linux machine so seldom works.
XFS on the old, ext4 on the newEarlier LinkStation and TeraStation units were built around XFS; later firmware moved to ext4. Both come back once the array is assembled, but the tools and the failure modes differ, so the volume type is worth knowing early.
What EM mode is telling youEmergency mode is the unit saying its firmware would not start. It carries no verdict on the data partition and it is not a diagnosis. Counting the blinks narrows the field; reading the disks settles it.
Two things we never runThe firmware's own recovery routine, which can reinitialise an array while it is meant to be fixing one; and filesystem repair tools pointed at the original disks. Neither is used here. Everything is assembled read-only from the images.

What happens between arrival and return.

The most recent cases →
01

Booked in, then assessed at no cost Free

Nothing becomes chargeable until you have said yes to it. Each item takes a case number of its own the moment it arrives, an engineer establishes what has actually failed, and you are given a candid view of which files stand a realistic chance of returning. The single quote that follows is fixed, written down, and costs nothing.

Diagnosis at no costOne fixed quote, in writingNothing signed
02

Image the disks, alter nothing

No analysis begins until each member has a sector-by-sector image behind it. The chassis stays unpowered while that runs, so no firmware routine can start itself and nothing is written to the originals.

Every member clonedUnit stays powered off
03

Rebuild the layout on the images

Everything from here runs on the copies: partitions mapped, Buffalo's array metadata decoded for member order and chunk size, the array assembled away from the unit, and the XFS or ext4 filesystem mounted read-only.

Metadata read, array assembledMounted read-only
04

Repair what has broken

Array, partition table or filesystem — whatever needs mending is mended on the assembled copy and never on your disks. A damaged XFS log or ext4 journal is dealt with there, and then every share is opened and checked.

Repaired on the copyEvery share opened
05

Opened, verified, and sent home

Nothing is billed until you have seen the recovered file list in full and told us to go ahead. What comes back arrives on new media, with the return journey at our cost, and the case stays open at this end until you have opened every file yourself.

You approve the list firstReturned on fresh mediaThe return post is ours

What tends to show up first

  • The blink code names a fault, not a cause — the same pattern fits a broken array, a disk that has left it and a firmware image that will not load. Only reading the disks separates them.
  • These are not ordinary Linux disks — older units carry XFS and newer ones ext4, but the array is described in Buffalo's own metadata rather than a standard superblock, so plugging a member into a PC proves very little.
  • A failed update rarely touches your files — the boot partition is small and quite separate from the data. The loss usually happens afterwards, when the recovery tool offers to reinitialise the disks.
  • RAID is not a backup, and this is where people find that out — mirroring survives one dead disk. It does nothing about deletion, ransomware, a failed enclosure or a unit knocked off a desk, and most boxes we open held the only copy.

The detail that decides most of these cases: a Buffalo array is put back together from its own metadata rather than a standard superblock, so member order, chunk size and start offset all have to be established from the images before a single share appears. Get that wrong and the disks look blank; get it right and a unit the firmware wrote off usually gives everything back.

From the casebook, lately.

MH · MHD-2026-6857ON RECORD ✓

A four-bay NAS with mismatched disks, undone by its own rebuild

Two 8TB disks and two 4TB, one member already down, and the TeraStation rebuild ran overnight only to halt with the array marked failed. Underneath sat Buffalo's own RAID descriptors and an XFS volume the firmware would no longer mount. We imaged all four, worked out member order and offset from the images, and every share opened exactly as it had.

All shares recovered5 days from arrival

Before it comes to the lab.

Do these now

  • Power the unit off as soon as EM or a fault code shows
  • Label each disk with the bay it came out of
  • Send the disks untouched, or send the NAS complete
  • Tell us the model and the array type if you know them

Things best not done

  • Run the firmware updater again to clear the error
  • Point xfs_repair or fsck at the original disks
  • Allow Windows to initialise a disk when prompted
  • Rotate the disks through the bays to find the fault

Questions we are asked about Buffalo NAS units.

EM mode on a LinkStation — is the data lost?

Rarely. EM stands for emergency mode, and it means the firmware would not start — not that the array has gone. The disks are read away from the chassis, so what the front panel is blinking rarely settles the outcome. Leave the unit switched off and every option stays open.

Can I read Buffalo disks by putting them in a Linux PC?

Rarely, no. Older LinkStation and TeraStation units are formatted XFS and newer ones ext4, but the array is described by Buffalo's own metadata rather than a standard superblock, so a Linux machine usually lists partitions it will not assemble. Work from images, establish member order and chunk size, and the volume mounts read-only on plain hardware.

A firmware update killed it — are the files gone?

Almost always they are still there. An interrupted update damages the small system partition the unit boots from, and that is not where your shares live; the data partition is normally untouched. The risk comes next, from the recovery routine that offers to put the firmware back and reinitialises the disks while it does so.

The NAS is RAID — surely that counts as a backup?

It does not. RAID carries you through one dead disk and nothing else: deletion, ransomware, a failed enclosure, a botched update or a unit pulled off a desk all take the whole volume with them. Most Buffalo jobs that reach us were the only copy of something. If it is easier, a NAS can travel to the Guildford lab whole, drives still in it.

Switched off, it keeps every chance it has.

Each further power-up asks more of a drive that has already begun to fail. Open the case first and let the free diagnosis tell you what is left.

0800 6890668