They could use the BSSID, which is unique per physical access point.

There’s a previous post on the matter. https://www.nasa.gov/blogs/spacestation/2026/01/07/nasa-post...

For privacy reasons they did not share who or what it entailed.

The image for the prior post (https://www.nasa.gov/blogs/spacestation/2026/01/07/expeditio...) just below the info on that page looks like some sort of crazed hosted situation, with what looks like a bag over an astronaut's head (it's actually a covering to protect the helmet mask while not in use). Paired with a medical situation post, strange vibe at first glance.