New York security deposit rules are here and here.

Tenant.Net suggests filing a complaint with the NYS AG at 212-416-8000.