Obamacare site hacked but nothing taken, HHS says