For one HHS office, a cyber failure isn't always bad news