Data breaches in mobile devices have surged since 2019, particularly due to the COVID-19 pandemic, with phishing attacks becoming the most reported incidents. This rise has raised security concerns, leading to significant data and financial losses for individuals and organizations. Technological advancements have also contributed to these vulnerabilities, prompting criminals to exploit weaknesses in mobile devices. This study employs the routine activity theory to examine the mechanisms behind mobile data breaches and propose effective solutions. Utilizing a qualitative generic inquiry design, data were collected through interviews with 12 IT professionals, each with over three years of industry experience. Thematic analysis, conducted with QDA Miner software, revealed that phishing, malware, and brute force attacks are prevalent threats faced by organizations. Effective countermeasures identified include strong passwords, access controls, firewalls, and intrusion detection systems. The findings aim to enhance mobile device security in the current landscape.