Was a single certificate actually compromised and/or used maliciously? I am looking for an actual breach, not a theoretical scenario.

Based on that Wikipedia article, no. This is just more of the same friendless PKI geeks making the world unnecessarily more complicated. The only other people that benefit are the certificate management companies that sell more software to manage these insane changes.

There are multiple examples of service compromise in the linked Wikipedia page.