NEW HAVEN, Conn. (WTNH) — Many Anthem customers are frustrated about the cyber attack. Some are confused about about the free credit monitoring that the company is offering.

There are more than a million Anthem Blue Cross Blue Shield customers in Connecticut, caught in the cross hairs of a sophisticated data breach. Their personal identifying information is in jeopardy, accessed by cyber attackers. All are waiting to hear from Anthem.

“They are working on it apparently,” said Jibey Asthappan.

The Director of the National Security Program at University of New Haven says that notification will happen after Anthem completes a thorough check.

“Once they identify who the attacker is, or where they came from, they have logs as to where they access, what pages they access, what files they accessed,” said Asthappan.

Members affected will be contacted, then offered credit monitoring and identity protection services, free of charge.

“In a lot of these cases, they’ll wait over a year before they start using that personal information,” said Asthappan.

But already, spear phishing is underway, a more targeted scam.

“You can see at the bottom, ‘click here to get your free year of credit card protection,'” said Asthappan.

Do not click. Scammers are phishing for more info. You may want to change your email.

“You are likely part of the breach,” said Asthappan.

Being proactive is the best approach.

“Everyone should be doing an inventory,” said Asthappan. “‘What am I most fearful of losing?’ and then decide ‘well, how am I going to mitigate that threat, is it my bank account, is it my credit score.'”

Checking credit reports and financial statements should be on the list. The Connecticut Department of Consumer Protection also advises looking over medical and insurance statements for signs of misuse.

You may want to contact credit report companies and and put a freeze or a fraudulent alert on your account. You may also want to reduce your bank services, such as the money transfer option.

If you are among those affected, the persistent threat could last for years.