They were accessing a system via internal endpoints not released to the public. They were also using stolen credentials a former employee of songbird brought over to ticketmaster, and accessed devices using stolen credentials. If that isn't "hacking" then the word has lost all meaning.
https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-mi...