Looking at a company profile and found that 1st and 2nd notification of risk have been served, what is this?

A notification of risk is a requirement that when a security breach has happened and personal information has been compromised the company must post a written notification of risk. If there are two that means they have had two security breaches.

Shirley