Answer:
The answer is yes to both questions. Even if we assume that the thief is the caregiver (which you have implied, but not said), the PIN has no ability without the card to effect a withdrawal. The card was used to complete the transfers and it was stolen. The Fed has opined officially in writing that a customer's negligence in writing a PIN on a debit card doesn't shift responsibility for an unauthorized withdrawal made with the card to the customer. I see no reason to differentiate your scenario from the one the Fed addressed.
First published on BankersOnline.com 8/27/07