First thing to do is to tell your bank that these withdrawals are un-authorised and to get them to reverse the transactions. Secondly you write to the insurance company concerned and tell them that they have acted without your authorisation and that you have reported the transactions as fraudulent use of your card. You then state that you will be suing them for all the costs involved with retrieving your money as well as interest.
Their relationship is between their customer and them, not with you and you must make this clear.
This is a very salient lesson in "not lending unreliable people money"