It should be returned but unless there is logs it's hard to prove what happened and even with logs it might be hard.