duty: 3 or 6 years from knowledge of the breach (IDT Corp. v. Morgan Stanley, 879 N.Y.S.2d 355, 359-60 (2009)); (5) negligence: 3 years from injury (Matana v. Merkin, 957 F. Supp. 2d 473, 494 (S.D.N.Y. 2013)); and (6) fraudulent concealment: 6 years from occurrence or 2 years from discovery, whichever