On October 8, an investor discovers that a security purchase that took place on August 5 of the same year was prompted by fraudulent information provided by the broker-dealer on the day of the purchase. How long does the investor have to bring action