Real-time, location-aware mobile device data breach prevention

A cognitive security service learns regular locations and usage of one or more mobile devices for a user at multiple times based on aggregated location and usage information reported by the one or more mobile devices via a network. The cognitive security service forecasts one or more selected locations and selected usage by the user with a highest probability of predictability at one or more future sequential times from among the regular locations and usage. The cognitive security service, responsive to detecting a current location of the one or more mobile devices for the user deviates from the one or more selected locations and selected usage beyond a threshold, triggers, via the network, one or more secondary levels of authentication at the one or more mobile devices, wherein the one or more secondary levels of authentication prevent data breaches on the one or more mobile devices through real-time, location aware data security.