In an approach to incident prediction and response, one or more computer processors receive one or more alerts corresponding to an incident. The one or more computer processors aggregate the one or more alerts with additional data corresponding to the incident. The one or more computer processors feed the aggregated data into a prediction model, where training of the prediction model uses associated independent stacked Restricted Boltzmann Machines utilizing one or more supervised methods and one or more unsupervised methods. The one or more computer processors determine, based, at least in part, on one or more calculations by the prediction model, at least one probability of the incident. The one or more computer processors determine whether the at least one probability exceeds a pre-defined threshold. In response to determining the at least one probability exceeds a pre-defined threshold, the one or more computer processors send at least one notification.