1. A computer system comprising one or more processors, one or more computer-readable memories, one or more computer-readable storage devices, and program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising: program instructions to learn a plurality of regular locations and usage of one or more mobile devices for a user at a plurality of times based on aggregated location and usage information reported by the one or more mobile devices via a network; program instructions to forecast one or more selected locations and selected usage by the user with a highest probability of predictability at each of a plurality of future sequential times from among the plurality of regular locations and usage; and program instructions, responsive to detecting a current location of the one or more mobile devices for the user deviates from the one or more selected locations and selected usage beyond a threshold specified by the user, to trigger, via the network, one or more secondary levels of authentication at the one or more mobile devices, wherein the one or more secondary levels of authentication prevent data breaches on the one or more mobile devices through real-time, location aware data security.