This topic may have been beat to death but I wanted to query the group for some guidance. We have a fielded product (~200 units) where about 5 units came back to the factory with the EEprom completely erased. This is not simple corruption of a few bytes, etc. but all locations blanked (0xFF). I am aware that it is is important to enable the BOD fuse (which we do) to prevent possible corruption but is it possible for the entire EEprom to become erased if the BOD fuse was not programmed? I ask because due to the construction of the product, gaining access to the circuitry in order to interrogate the micro for it's fuse settings is not trivial.
So, is there any other mechanism for erasing the EEprom other than using the NVM controller? Has anyone else in the group experienced the same problem? At the moment we are certainly puzzled as to how this could have happened.
Thanks for your help.