The attackers exploited a vulnerability in the event's ticketing system to enter the network. This marks the first step in their infiltration, indicating a sophisticated approach to gaining a foothold within the target's network.